Disney says Disney+ account passwords being sold in underground hacking forums are coming from previous breaches at other companies, predating last week's launch of its streaming service.
The company reiterated Wednesday that it found no evidence of a security breach and that account problems are limited to "a very small percentage of users."
Despite warnings by security experts, users often reuse passwords at multiple services, meaning a breach at one opens the door for a hacker to gain access to the others.
The news site ZDNet found stolen account usernames and passwords selling for US$3 on underground hacking forums. Disney's streaming service costs US$7 a month or US$70 a year.
Advertisement