I've seen this article floating around over the last few weeks. It is strange to me that a company would put out a "data breach" notice due to detected credenti

I've seen this article floating around over the last few weeks. It is strange to me that a company would put out a "data breach" notice due to detected credential stuffing attacks. From a reputational perspective I see people reacting thinking their data has been stolen, whilst not realising that this was due to credential stuffing. If I was Roku I wouldn't have said the words "Data Breach" at all, I would just email customers recommending them that they change their password.