Thousands of hacked Disney+ accounts are already for sale on hacking forums

Catalin Cimpanu, ZDNet:

The Disney+ launch was marred by technical issues. Many users reported being unable to stream their favorite movies and shows.

But hidden in the flood of complaints about technical issues was a smaller stream of users reporting losing access to their accounts.

And:

Many users reported that hackers were accessing their accounts, logging them out of all devices, and then changing the account’s email and password, effectively taking over the account and locking the previous owner out.

Currently, once your account is set up, Disney+ does not validate your logins in any way, beyond user id and password. Just like Netflix, but unlike Apple TV+ and unlike HBO. We’ve heard rumblings of Netflix considering a change to this policy but, so far, nothing concrete.

[H/T, Nayan Sthankiya]