Plex has sent out an email to inform its subscribers of a security vulnerability. The subject line of the email refers to a “possible data breach,” but the email’s body describes suspicious activity and how a third party is accessing a portion of a database.
Emails, usernames, and encrypted passwords, according to the firm, were among the stolen information. All passwords were encrypted and hashed, however all Plex users are required to update their security information out of “an excess of caution.”
“We want you to be aware of an issue involving your Plex account information yesterday,” states Plex in the email. Although we think this incident won’t have much of an effect, we nevertheless want to make sure you have the knowledge and resources you need to keep your account secure.
The user is then informed:
“We found unusual activity on one of our databases yesterday. We started looking into it right away, and it does seem that a small subset of data, including emails, usernames, and encrypted passwords, was accessible by a third party. Despite the fact that all account passwords that could have been accessed were hashed and secured using standard practises, we are asking all Plex accounts to have their passwords changed out of an abundance of caution. Please rest assured that neither credit card nor other payment information was exposed in this event because neither is stored on our servers.
The business claims it is making preparations to help prevent a similar incident from occurring again and is requiring all users to change their passwords.
To cut a long tale short, we politely ask that you promptly reset your Plex account password. There is a checkbox to “Sign out linked devices after password change” when doing this. Additionally, you will need to login in again using your new password on all of your devices (including any Plex Media Servers you may own). Although doing this will be annoying, doing it will boost security. Here is a help post we’ve written with detailed instructions on how to reset your password.