Logins and passwords that match Netflix accounts have been released by a separate company, Netflix said today in an email to affected customers. I found out via email, as I am a customer. They sent this warning:
As part of our regular security monitoring, we discovered that credentials that match your Netflix email address and password were included in a release of email addresses and passwords from a breach at another company.
The company doesn’t say how many accounts were affected or what that company is. Netflix reset my password and prompted me to go in and change it to a new one I’d remember. The email has this note: “(We are) unaware of any evidence that your Netflix account has been compromised…”
I have emailed the company asking for more information on the nature of the breach. (UPDATE: As of this afternoon, still no answer.)
Whether or not you have received this particular email, you may wish to reset your password. For information on securing your Netflix account (which wouldn’t have helped, in this particular case) you can visit this page on their site.
UPDATE 3:30 pm: Lost Remote reader Tom Kiefer comments: “Note that the email didn’t say that “[your] information was in the hands of another company”. It said that a data breach from another company contained a email/passsword combination that looked like your email/password at Netflix, so they’re forcing your to change your Netflix password as a precaution.” That’s an important distinction, and I have edited the article accordingly.