Binge, Kayo customers reminded on password protection

Hubbl, the parent company of Binge and Kayo, recently advised its customers not to reuse the same password for multiple accounts, following a data security incident where an unauthorised third party may have accessed their account.

While the incident was not on Foxtel platforms, credential stuffing involves the illegal transactions of emails and passwords, which may be  tested against multiple website logins in an attempt to gain account access.

In the email to users, Hubbl advised,“We have recently become aware of a data security incident where an unauthorised third party may have gained access to your Hubbl account for your Binge and Kayo service, using credentials that may have been previously leaked online from other sources.

“During this attack, your username and password were successfully verified against Hubbl’s systems which would have allowed the unauthorised third party to gain access to your Hubbl account.”

According to the email, full names, email addresses, phone numbers, and masked credit card numbers of impacted users may have been exposed.

A Foxtel Group spokesperson: “Our customer accounts are monitored 24/7 for suspicious or unusual activity.

“In some cases, we discover that, unrelated to our systems, customers are a victim of ‘credential stuffing’. This is the automated injection of stolen usernames and passwords into website forms. In other words, the email and password the customer uses for their account is duplicated somewhere else online and has been obtained by a bad actor and used to access their account.

“We encourage customers to be disciplined in the protection of their passwords, ensuring they are strong, unique, and not shared.”

Hubbl took over Binge and Kayo accounts in February from the previously-named Streamotion.

Source: Gizmodo