Plex users: Reset your password!

Plex users are being urged to reset their passwords after a data breach, with Plex stating that an attacker accessed a “limited subset” of customer data, including email addresses, usernames, hashed passwords and authentication data. According to Plex, any account passwords that may have been accessed were securely hashed, meaning they cannot be read by a third party, and Plex notes that it does not store credit card data on its servers.

The Malwarebytes piece encourages users to reset their Plex account password immediately and to consider using the option to sign out of connected devices during the reset, which will sign users out of all devices and require re‑sign‑in with the new password. For those using Single Sign-On, Plex advises signing out of all active sessions and then signing back in as normal. The article also recommends enabling two‑factor authentication and warns to watch for phishing attempts impersonating Plex. Malwarebytes promotes its free Digital Footprint scan to check how much personal data may be exposed online.