Global digital streaming hardware provider Roku suffered a major secondary credential stuffing breach that compromised 576,000 user accounts worldwide, including a substantial Australian consumer footprint. Attackers attempted fraudulent subscription modifications.