Plex users might want to change their passwords.
Per an email sent out to users early this morning, Plex has suffered a “potential” data breach, one in which a third-party was able to access a “limited subset” of data. The data that was accessed include emails, usernames, and passwords, and while the latter were, thankfully, encrypted, Plex has advised that everyone reset their passwords right away out of caution.
Plex has clarified that credit card and other payment data weren’t vulnerable, as it doesn’t store this type of information on its servers.
Plex on what it’s doing:
We’ve already addressed the method that this third-party employed to gain access to the system, and we’re doing additional reviews to ensure that the security of all of our systems is further hardened to prevent future incursions. While the account passwords were secured in accordance with best practices, we’re requiring all Plex users to reset their password.
Plex on what users should do:
Long story short, we kindly request that you reset your Plex account password immediately. When doing so, there’s a checkbox to “Sign out connected devices after password change.” This will additionally sign out all of your devices (including any Plex Media Server you own) and require you to sign back in with your new password. This is a headache, but we recommend doing so for increased security. We have created a support article with step-by-step instructions on how to reset your password here.
Plex is a popular streaming media service that allows users to access their movies, TV shows, music, and other content on various devices.
The service originally began as freeware, but it now offers a paid-subscription service dubbed “Plex Pass” that features additional perks. These include DVR recording, the ability to stream trailers and extras, hardware-accelerated streaming and transcoding, and HDR to SDR tone mapping.
Source: Plex