Disney+ accounts are already being hacked and sold online, report says

Turns out it's not just cartoon fans who want access to Disney+. Hackers have already infiltrated accounts and are offering them for free — or selling them for a small price — online.

According to an investigation by ZDNet, thousands of Disney+ accounts have already been hacked since the streaming service launched November 12. The accounts are reportedly being posted on hacker forums for free and, in some cases, are being sold for $3-11. The cost of a Disney+ subscription is $7 per month.

Users are saying that hackers are accessing their accounts, logging them out of their devices and then changing the account's email and password so they can no longer gain access.

Social media has been filled with users complaining of hacked Disney+ accounts since the day the service launched.

It's unclear how hackers gained access to the accounts, but according to ZDNet, it appears "in some cases hackers gained access to accounts by using email and password combos leaked at other sites, while in other cases the Disney+ credentials might have been obtained from users infected with keylogging or info-stealing malware."

The reports of hacked accounts follow an already rocky start for Disney+. Users said they couldn't access the streaming service the day it launched and a spokesperson for Disney+ confirmed more people than expected tried to access the app, leading to connectivity issues.

“The consumer demand for Disney+ has exceeded our high expectations," a Disney spokesperson said November 12. "We are pleased by this incredible response and are working to quickly resolve the current user issue. We appreciate your patience.”

Disney hasn't released a statement on the hacked accounts, but the Disney+ help account on Twitter has been very active in replying to complaints.

The Better Business Bureau offers the following tips to protect yourself against hackers:

• Use strong passwords. Avoid using your birth date, child’s name or birth date, mother’s maiden name, the last four digits of your Social Security number, or really obvious ones like “123456” or “password.”
• Change your passwords frequently
• Use different passwords for each online account or website
• Be careful about the types of information you share online, especially if it is information that could be used to get past security questions on your accounts (things like your first car, first pet’s name, city where you were born)
• Shred outdated documents with personal information. While you should keep your tax returns forever, you should shred supporting documents for your tax returns after seven years. After one year, shred bank statements, pay stubs, and medical bills (unless you have an unresolved insurance dispute). Shred utility bills a month after they have been paid.