This just looks more like Roku had identified significant amounts of credential stuffing across customer accounts. As opposed to someone breaking into the back end of Roku and leaking customer account details.

It could also be targeted credential stuffing given recent events. An interesting tactic to create problems for a company.

I'm not saying Roku is a good company, but this isn't really a data breach but poor credential management by customers.