Thousands of Disney+ subscribers are left without answers after their accounts have been hacked and sold.

Even though the streaming service launched only a week ago, hackers didn’t waste any time hijacking Disney+ user accounts. In fact, it started mere hours after the service launched.

Disney movies on Disney Plus streaming service

Users Reporting Disney+ Accounts Have Been Stolen By Hackers

Users are posting complaints on social media platforms that they’ve had their accounts stolen. Apparently, hackers are accessing users’ Disney+ accounts, logging them out of all devices, and then changing the account’s email and password. This effectively locks the previous owner out and puts the hacker in control.

Many of these hacked Disney accounts are popping up on hacking forums for sale. The service normally costs subscribers $7 per month, which runs users $84 a year. But hackers are selling the account credentials for anywhere between $3 to $11, sometimes claiming that the accounts were prepaid for anywhere between 1 to 3 years. Some are even offering a warranty, but how much can you trust a hacker to keep their word?

There are also several lists of Disney+ account credentials that hackers have compiled, and they are being offered for free on various hacking forums for the hacking community to share and use.

No Indication of Security Breach on Disney+

Disney has released a statement saying that they take “users’ data very seriously,” but there is “no indication of a security breach on Disney+.” Which leads us to ask, how are hackers getting a hold of users’ account credentials, then?

It looks like many subscribers may have used the same email and password combinations that they previously used for other services or websites. That information could have already been stolen during security breaches elsewhere.

Some users claim that they used passwords that were unique to their Disney+ accounts. If this is the case, it is also possible that their credentials could have been obtained from devices infected with keylogging or info-stealing malware.

What to Do If Your Disney+ Account Has Been Compromised

If you believe that your Disney+ account may have been compromised by a hacker online, or you know that you used the same email and password combination as another site or service, you should change your password immediately.

Make use of third-party tools that can monitor logins and will inform you when your credentials have been compromised. Some services will also let you know if your information pops up on the dark web.

If you find that you have been locked out of your Disney+ account altogether, Disney says that you should contact customer support immediately for assistance.