Millions of streaming logins leaked: Is your Netflix, Disney+, Prime Video account safe?
Millions of streaming accounts compromised in major credential leak
In a major cybersecurity warning, global security firm Kaspersky has revealed that more than 7 million user accounts linked to popular streaming services were compromised in 2024. The affected platforms include Netflix, Amazon Prime Video, Disney+, HBO Max, and Apple TV+.
Unlike typical data breaches caused by direct hacks, these account takeovers were the result of spyware infections, phishing scams, and fake browser extensions—tactics used by cybercriminals to deceive users into unknowingly handing over their login details.
Streaming giants targeted
Kaspersky found that its systems detected over 96,000 attempts to spread malware disguised under the names of these five streaming services. The highest number of affected users came from Brazil, followed by Mexico and India, but victims were reported globally.
These stolen accounts are often sold or shared on underground forums, putting millions at risk of account takeovers, data theft, or even financial fraud if the same login details are reused across multiple services.
Is Netflix the most vulnerable platform?
As one of the world’s most popular platforms, Netflix saw the highest number of exposed accounts — over 5.6 million. Brazil topped the list of affected countries, followed by Mexico and India.
Disney+, Prime Video, HBO Max also hit
Disney+ had 680,850 compromised accounts, with Brazil again leading, followed by Mexico and Germany.
Amazon Prime Video saw fewer compromised accounts at 1,607, but experts warn of added risk if these logins match Amazon shopping accounts.
HBO Max and Apple TV+ also had thousands of leaked accounts, although exact figures were not disclosed.
Not just your watchlist: The bigger risks
While billing details are usually protected within streaming platforms, password reuse makes this leak especially dangerous.
Using the same password elsewhere? You're in trouble
If your Prime Video password matches your Amazon login, or your Apple TV+ credentials mirror your Apple ID, cybercriminals could potentially gain access to:
Online shopping and payment methods
Social media profiles
Email accounts
Banking and personal data
Once a device is infected, malware can collect more than just streaming logins, including cookies, saved card details, and other sensitive information.
Why Gen Z is a key target
As streaming culture becomes increasingly tied to Gen Z’s online identity, threat actors are adapting. Recognizing this, Kaspersky has launched “Case 404,” an interactive game to teach young users about cybersecurity through real-world inspired scenarios. Completing the game also offers users a discount on Kaspersky Premium.
Urgent cybersecurity tips for users
Kaspersky recommends taking the following steps immediately:
Change your passwords
Use strong, unique passwords for each streaming service. Never reuse credentials across accounts.Enable two-factor authentication (2FA)
Activate 2FA wherever available, especially on accounts linked to purchases or personal data.Use a password manager
These tools generate, store, and autofill secure passwords, and notify you if any are found in data breaches.Be alert to phishing
Avoid clicking on suspicious links in emails or messages. Type URLs directly into your browser.Download apps only from official sources
Avoid cracked versions, pirated files, or third-party app stores. Never install suspicious .exe or .msi files posing as media players.Monitor your accounts
Regularly check account activity and sign out of unknown devices. Change passwords if anything looks suspicious.
User behavioir is the real weak spot
The core message from Kaspersky’s report is clear: most breaches happen because of poor online habits, not vulnerabilities in the platforms themselves.
Simple actions — like setting stronger passwords and avoiding shady downloads — can go a long way in protecting your digital life. As streaming becomes an integral part of modern entertainment, securing your accounts is no longer optional — it’s essential.
Sign up for the Daily Briefing
Get the latest news and updates straight to your inbox
