Kaspersky Found 5.6 Million Compromised Netflix Accounts Online

Kaspersky has identified over 7 million compromised streaming service accounts, including Netflix, Disney+, and Amazon Prime Video, exposing millions of users to risks stemming from malware infections and credential theft campaigns.

The findings come from Kaspersky’s Digital Footprint Intelligence team, which analyzed leaked credential datasets collected throughout 2024. According to their report, the stolen credentials were not taken directly from the streaming platforms but were harvested through broader malware operations targeting infected devices. These operations exploit unofficial downloads, pirated content, malicious browser extensions, and compromised apps, silently extracting login data, session cookies, and even payment details from unsuspecting users.

Out of the 7,035,236 compromised accounts identified, Netflix alone accounted for a staggering 5.6 million, making it the most targeted platform. The top three countries with the highest number of exposed Netflix accounts were Brazil, Mexico, and India. Disney+ followed with 680,850 compromised accounts, again led by Brazil, with Mexico and Germany trailing. Amazon Prime Video had a relatively smaller exposure at 1,607 compromised accounts.

For context, Netflix dominates the global streaming market with over 260 million subscribers, while Disney+ has grown rapidly to over 150 million users since its 2019 launch. Amazon Prime Video, part of Amazon’s broader Prime subscription, holds tens of millions of global subscribers, offering a mix of mainstream and niche programming.

Kaspersky’s report underscores that once a device is infected, attackers rarely limit themselves to streaming credentials. Malware typically collects a wide range of sensitive data, from login passwords and bank card details to browser session cookies, which are later sold or leaked on underground forums. In some cases, attackers release this data freely to gain reputation among cybercriminal peers, increasing the chances of identity theft, financial fraud, and further account takeovers, especially if users reuse the same credentials across services.

To safeguard your streaming account, regularly review login activity to identify any signs of unauthorized access and change passwords immediately. Only use official streaming apps and avoid connecting your accounts to third-party platforms that promise to unlock access to content reserved for other regions. For this purpose, it would be better to use a VPN tool with good support for streaming services.