Just hours after Disney launched the Disney+ streaming service, some users have found themselves locked out of their accounts, with their account information changed. ZDNet reports that thousands of these accounts are up for sale on the dark web. The posts on hacking forums showed the type of subscription and when the account expires. The prices ranged from US$3 (around CA$4) to US$11 (CA$15), with many being offered for free.
Disney told MobileSyrup that there had been no security breach and that they take "privacy and security of our users' data very seriously." Access to these accounts probably happened to some people who like to use the same password for multiple accounts. And without two-factor authentication, no added security verifies a login. Disney+ just launched on November 12 in Canada, the United States, and the Netherlands, with over 10 million subscribers gained in the first 24 hours.