Stolen streaming accounts in Mexico

Cyberpeace Tech
Jul 7
2 min read

Stolen streaming accounts have become a growing concern in Mexico, positioning the country as one of the most affected globally. In particular, a high number of leaks have been detected in platforms such as Amazon Prime Video and Netflix, reflecting an alarming trend in cybercriminal behavior.

Millions of accounts compromised in 2024

Over the last year, more than 7 million compromised accounts from popular services such as Netflix, Amazon Prime Video, Disney+, Apple TV+ and HBO Max were recorded.

Mexico stands out for topping the world list in Amazon Prime Video leaks and for ranking second only to Brazil in stolen Netflix accounts.

Cyberattacks disguised as entertainment

Between April 2024 and March 2025, more than 96 thousand cyberattack attempts were detected using the name and image of the most popular streaming platforms. The most commonly used method was phishing, where criminals create fake sites that mimic the original platforms to trick users and obtain their passwords.

This type of scam is usually presented as an urgent message: “Your account is about to expire” or “Verify your information now”, appealing to the user's concern for not losing access to their content.

May 2024 saw the highest number of global victims of these scams, and Mexico was one of the most impacted countries.

What do cybercriminals do with stolen accounts?

Stolen accounts are often sold on the digital black market, either as “shared” access or at very low prices. In other cases, attackers distribute them for free on underground forums to gain notoriety among their peers.

Many of these operations use malicious software such as PSW-Trojans, designed to capture passwords stored in browsers. These programs are presented as fake updates or “modified” applications that promise free premium functions, but in reality compromise the security of the device.

Almost 80% of the attacks were executed using risk tools known as RiskTool, which allow the theft of personal data and facilitate future infections.

Implications for Mexico and how to prevent

For Mexico, this scenario represents a warning sign. The growth of digital consumption must be accompanied by a greater culture of cybersecurity.

The use of secure passwords, two-factor authentication and distrust of suspicious messages are key practices to protect personal accounts.

In addition, many times stolen credentials are associated with credit cards or are repeated in other services such as social networks or online banking. This increases the risk of financial fraud, identity theft or loss of confidential information.

Mexico as an example to strengthen cybersecurity

The Mexican case can serve as a reference to strengthen digital cybersecurity in Latin America. The massification of the use of digital platforms must be accompanied by public policies, educational campaigns and collaboration between authorities and citizens to address cyber threats.

At Cyberpeace, we know that cybersecurity begins with awareness. Therefore, we invite you to stay alert to digital fraud and practices such as the theft of streaming accounts. Remember: to inform yourself is to protect yourself. Do you want to learn more about how to take care of your digital security? Follow us on our social networks and always stay one step ahead.