Plex Urges Password Reset After Data Breach

According to Plex, a cyberattack led to a data breach that exposed a limited subset of customer data from one of its databases, including emails, usernames, securely hashed passwords and authentication data, with an unidentified attacker able to extract the information. The company notes that it had implemented password hashing, which stores passwords in encrypted form and makes decrypting stolen passwords significantly more difficult for attackers.

Plex’s data breach notification states that account passwords accessed were securely hashed and could not be read by a third party. As a precaution, Plex urged all users to reset their passwords and to select the option to sign out connected devices after the password change so that reauthentication is required on all devices. The firm also confirms that credit card or payment information was not affected, as such data is not stored on Plex’s servers, and it has not disclosed further details about the attack.