Over 7 million streaming accounts’ credentials were leaked in 2024: Kaspersky Report

In a new report, Kaspersky identified over 7 million compromised accounts belonging to streaming services like Netflix, Disney+, Amazon Prime Video and othersTo raise their awareness and build digital resilience, Kaspersky has launched “Case 404” — an interactive cyber-detective game that helps Gen Z recognize hidden dangers and learn how to protect their digital lives.

According to recent studies, Gen Z not only spends more on streaming platforms than any other generation but also actively participates in online fandoms, sharing clips, memes and fan theories across social media: episodes become memes, quotes turn into tweets, and characters live on through edits, debates, and TikTok trends.

Yet this always-online, highly engaged behavior comes with hidden risks. The very devices Gen Z uses to stream their favorite shows can become entry points for cybercriminals through malware infections. These threats often hide in unofficial downloads, pirated content, browser extensions, or compromised apps, silently collecting login credentials, session data, and other personal information.

Kaspersky Digital Footprint Intelligence team analyzed compromised credentials and uncovered 7,035,236 cases in 2024. These weren’t stolen directly from the platforms themselves but were collected as part of broader credential theft campaigns.

Netflix leads both in popularity and in exposure, with 5,632,694 compromised accounts detected. Brazil had the highest number of exposed Netflix credentials in 2024, followed by Mexico and India. Kaspersky experts detected 680,850 Disney+ accounts in leaked data sets. Again, Brazil stood out as the country with the most breached accounts, followed by Mexico and Germany. Amazon Prime Video, though smaller in volume with 1,607 compromised accounts, still plays a significant role, especially among Gen Z viewers looking for more subversive or edgy narratives.

Once a device is infected, cybercriminals don’t stop at the streaming app. Malware collects sensitive data — account credentials, cookies, bank card details — which are then sold or leaked on underground forums. Sometimes, attackers give this data away just to build their reputation. These forums are active, fast-moving, and accessible to a wide range of malicious actors. What begins as a compromised Netflix password can quickly snowball into broader digital intrusion, identity theft, or financial fraud, especially if the same credentials are reused across services.

To respond to this shift, Kaspersky has created “Case 404” — an interactive cybersecurity game explicitly tailored for Gen Z users. In this digital quest, players step into the role of AI-powered cyber-detectives, investigating realistic online crimes inspired by current threats. Upon completing all cases, users receive a discount on Kaspersky Premium, turning new knowledge into actionable protection.

“For Generation Z, streaming is more than entertainment; it’s a daily habit, a source of identity and community. But that emotional connection also creates a blind spot. Malware hidden in unofficial downloads or third-party tools silently steals login credentials and personal data, which are then traded or sold on cybercriminal forums. Protecting your streaming account today means thinking beyond passwords — it means securing your devices, avoiding suspicious downloads, and being mindful of where your clicks lead you,” comments Polina Tretyak, digital footprint analyst at Kaspersky.

To watch favorite shows safely, Kaspersky recommends changing passwords for the potentially compromised accounts and ensure there has been no suspicious activity associated with these accounts. Always use a legitimate, paid subscription when accessing streaming services and ensure you’re using apps from official marketplaces or the official websites. Use a reliable security solution, like Kaspersky Premium, to detect malicious attachments that could compromise your data. Ensure secure browsing and safe messaging with Kaspersky VPN, protecting your IP address and preventing data leaks.