Plex

2022 - 8 - 24

Post cover
Image courtesy of "The Verge"

Plex was compromised, exposing usernames, emails and passwords (The Verge)

Streaming media platform Plex sent out an email to its customers earlier today regarding a security breach that may have compromised usernames, emails and ...

The cause of the breach has been found, and Plex has taken action to prevent others from taking advantage of the same security flaw. [either a free or paid password manager](https://www.theverge.com/22311182/best-free-password-manager-bitwarden-zoho-vault-roboform-sticky-password) to easily manage unique, difficult-to-guess passwords and 2fa codes across all your apps, services, and sites. Streaming media platform Plex sent out an email to its customers earlier today notifying them of a security breach that may have compromised account information, including usernames, email addresses and passwords.

Post cover
Image courtesy of "BetaNews"

Plex suffers data breach; third-party gains access to emails ... (BetaNews)

Plex has emailed its users to warn about a security indecent it has become aware of. While the subject line of the email refers to a “potential data breach” ...

This will additionally sign out all of your devices (including any Plex Media Server you own) and require you to sign back in with your new password. Even though all account passwords that could have been accessed were hashed and secured in accordance with best practices, out of an abundance of caution we are requiring all Plex accounts to have their password reset. In the email, Plex says: "We want you to be aware of an incident involving your Plex account information yesterday.

Post cover
Image courtesy of "Mac Rumors"

Plex Asks Users to Reset Passwords Following Data Breach (Mac Rumors)

Popular media platform Plex has asked users to change their passwords "out of an abundance of caution" after it found a third-party had...

"I believe the engineering work is already underway to launch search ads in the Apple Maps app, and we should begin to see it be implemented sometime next year," wrote Gurman, in the subscriber-only version of his "Power On" newsletter today. The iPhone 14 and iPhone... Apple is currently expected to unveil the iPhone 14 lineup and the Apple Watch Series 8 at an event on Wednesday, September 7, according to a pivotal recent report. Bloomberg's Mark Gurman, who often reveals accurate insights into Apple's plans, claims that the company is planning to host its highly anticipated event to introduce new iPhone and Apple Watch models in early September. Ahead of Apple events expected over the next two months, there are now ten Apple devices that customers currently should not buy, with replacement models fast approaching. The fall is always a very busy period for Apple, often with at least two special events to launch new products and the release of major software updates for all of the company's platforms. The new 6.7-inch non-pro "iPhone 14 Max" could be in shorter supply than some of the other iPhone 14 models, according to display panel shipment and production estimates that were provided today by display analyst Ross Young. This likely means that Apple has few to no major new features or changes planned for the remaining iOS 16 betas and will instead focus on bug fixes in the final weeks before the software update is publicly released. It's not quite official, but it looks like we finally have a date for the big iPhone 14 event, so mark your calendars and read up on some of what we might see at the event. Unlike color option rumors, reports about upcoming iPhone camera technology tend to be fairly accurate, with camera component supply chains often revealing specific information well ahead of the device's release date. Even though all account passwords that could have been accessed were hashed and secured in accordance with best practices, out of an abundance of caution we are requiring all Plex account to have their password reset. This will sign out all devices, including Plex Media Servers, and require users to sign back in with their new password.

Post cover
Image courtesy of "Android Police"

Use Plex? You should reset your password immediately (Android Police)

Some Android Police writers received the email on August 24, so we believe the possible data breach was on August 23 in the US. Plex appears to be gradually ...

You can do that as part of resetting your password, and as ever, the app recommends that you turn on two-factor authentication if you don’t already have it running. [reset your Plex password here](https://support.plex.tv/articles/account-requires-password-reset/?utm_source=Plex&utm_medium=email&utm_content=reset_password&utm_campaign=sql_db_password_reset) or through the Android app. Even though all account passwords that could have been accessed were hashed and secured in accordance with best practices, out of an abundance of caution we are requiring all Plex accounts to have their password reset.”

Post cover
Image courtesy of "9to5Mac"

Plex data breach exposed email addresses and encrypted passwords (9to5Mac)

Plex this morning emailed all users to advise them that a third party was able to access “a limited subset of data,” but did not reveal how many accounts were ...

Even though all account passwords that could have been accessed were hashed and secured in accordance with best practices, out of an abundance of caution we are requiring all Plex accounts to have their password reset. [children to watch restricted content](https://9to5mac.com/2022/04/07/plex-update-discover-and-watchlist-features/). It appears Plex has not arranged sufficient additional bandwidth to cope with the flurry of password change attempts. While the account passwords were secured in accordance with best practices, we’re requiring all Plex users to reset their password. We want you to be aware of an incident involving your Plex account information yesterday. [Plex](https://9to5mac.com/guides/plex/) data breach has exposed usernames, email addresses, and encrypted passwords.

Post cover
Image courtesy of "PC Gamer"

Plex data breach crashed the service as users flocked to change ... (PC Gamer)

It's time to shore up your Plex account, people, as the best media streaming service has announced it's been hit with a large scale data breach.

There's no indication that this was part of the data breach, and could potentially be down to a whole swathe of users suddenly trying to login and alter their password details. Though it does still seem to be struggling actually getting those emails out given the current status of the site infrastructure. But it will add another little layer of security because any automatically logged in device will require a fresh login next time you turn it on. As I was writing this the actual Plex website went down, with the support page stating that it was investigating a problem on its side. It's time to shore up your Plex account, people, as the best media streaming service has announced it's been hit with a large scale data breach. [how to reset your password guide](https://www.anrdoezrs.net/click-7706533-13324952?url=https://support.plex.tv/articles/account-requires-password-reset&sid=pcg-gb-5111325879937888000) (opens in new tab) that is still accessible even if the site is down, as is the [request password reset](https://www.anrdoezrs.net/click-7706533-13324952?url=https://app.plex.tv/auth/#?resetPassword&sid=pcg-gb-1450691974664160000) (opens in new tab) page.

Post cover
Image courtesy of "BleepingComputer"

Plex forces password resets after database access incident (BleepingComputer)

The Plex media streaming platform is sending password reset notices to many of its users in response to discovering unauthorized access to one of its ...

Plex doesn't define that detail in the sent letter. Meanwhile, the Plex.tv website experienced an outage today and is down at the time of writing this. [Plex's instructions on resetting your password](https://support.plex.tv/articles/account-requires-password-reset/) immediately to minimize the chances of account takeover. Still, this hasn't been verified yet. Plex claims that it has identified the means by which the third-party accessed the database and addressed the problem to harden its systems and prevent similar incidents from re-occurring in the future. The Plex media streaming platform is sending password reset notices to many of its users in response to discovering unauthorized access to one of its databases.

Post cover
Image courtesy of "Windows Central"

You'll need to reset your Plex password because of a data breach (Windows Central)

Plex alerted customers on August 24, 2022, to a potential data breach. This security alert noted a database containing passwords, emails, and usernames may ...

Stored on a central server, you can then stream all this content to a device of your choosing. It's positive to see Plex take a proactive stance on this breach, alerting customers and requiring them to change passwords. As is the case with any account and service, we highly recommend the use of a password manager and two-factor authentication. When changing the password of your Plex account, the company urges customers to check the option to sign out of all devices to prevent any potential account breaches. The company announced a potential security breach, involving one of its databases. Plex is one of the largest streaming services around, particularly for running your own media server on a NAS enclosure.

Post cover
Image courtesy of "TechCrunch"

Plex warns users to reset passwords after data breach (TechCrunch)

The media streaming giant confirms usernames, email addresses, and scrambled passwords were accessed.

Click here to find out more about our partners. Find out more about how we use your information in our Privacy Policy and Cookie Policy. You can select 'Manage settings' for more information and to manage your choices.

Post cover
Image courtesy of "AppleInsider"

Plex video streaming service hacked, asks users to change passwords (AppleInsider)

While home streaming media app Plex says that only a "limited subset" of user data has been pulled from its servers, the company is asking all users to ...

"Rest assured that credit card and other payment data are not stored on our servers at all and were not vulnerable in this incident," says the email. It later modifies that to say that the company wants to "kindly request that you reset your Plex account password immediately." This will then mean users having to sign back in with their new credentials on every device.

Post cover
Image courtesy of "Variety"

Plex Data Breach: Streaming Service Says User Emails, Passwords ... (Variety)

Streaming service Plex said it discovered a “third party” was able to access to private user data including emails and passwords.

In an email to Plex users early Wednesday, the company said, “Yesterday, we discovered suspicious activity on one of our databases. ET Wednesday, a little more than an hour after indicating the company was looking into the issue. The company said it is requiring Plex users to reset their passwords as a result of the incident.

Post cover
Image courtesy of "PCWorld"

Plex hacked: Change your password right now (PCWorld)

The roll-your-own streaming server tool Plex has experienced a big hack.

[do it manually](https://go.redirectingat.com/?id=111346X1569483&url=https://support.plex.tv/articles/account-requires-password-reset/&xcust=2-1-871581-1-0-0&sref=https://www.pcworld.com/article/871581/change-your-plex-password-right-now.html). [hardcore nerds absolutely love](https://go.redirectingat.com/?id=111346X1569483&url=https://www.techhive.com/article/707605/plex-almost-makes-the-home-theater-pc-seem-cool.html&xcust=2-1-871581-1-0-0&sref=https://www.pcworld.com/article/871581/change-your-plex-password-right-now.html). It’s also getting a much higher profile these days, thanks to a series of feature additions like [built-in free streaming TV](https://go.redirectingat.com/?id=111346X1569483&url=https://www.plex.tv/watch-free-tv/&xcust=2-1-871581-1-0-0&sref=https://www.pcworld.com/article/871581/change-your-plex-password-right-now.html). [$36 at LastPass](https://go.redirectingat.com/?id=111346X1569483&url=https://lastpass.wo8g.net/QOngWx&xcust=2-1-871581-5-389929-13492&sref=https://www.pcworld.com/article/871581/change-your-plex-password-right-now.html) Plex promises that, as far as it can tell, credit card numbers and other payment data wasn’t affected. [The Verge](https://go.redirectingat.com/?id=111346X1569483&url=https://www.theverge.com/2022/8/24/23319570/plex-security-breach-exposes-usernames-emails-passwords&xcust=2-1-871581-1-0-0&sref=https://www.pcworld.com/article/871581/change-your-plex-password-right-now.html).

Post cover
Image courtesy of "Review Geek"

Plex Was Hit By a Data Breach, Here's How to Reset Your Password (Review Geek)

The Plex streaming platform warns that a “third-party” accessed user data, including email addresses and encrypted passwords. In an email sent on August ...

[its website](https://www.anrdoezrs.net/links/100317643/type/am/sid/126831-xid-fr1661360735aaa/https://www.plex.tv). The company didn’t wait til Friday afternoon to announce this data breach; it pushed an email to thousands of customers at 2 AM EST on a Wednesday. They can also generate secure new passwords or warn you when existing passwords may be insecure or compromised. We’re waiting for Plex to reveal more about the data breach. Plex says that it doesn’t keep payment data on its servers.) Password managers store all your login credentials in one place and can automatically log you into websites. [password reset page](https://www.anrdoezrs.net/links/100317643/type/am/sid/126831-xid-fr1661360735aac/https://www.anrdoezrs.net/links/100317643/type/am/sid/126831-xid-{xid}/https://app.plex.tv/#?resetPassword&___trxnet=cj). Now that your password’s reset, we can finally discuss this data breach. [plex.tv](https://www.anrdoezrs.net/links/100317643/type/am/sid/126831-xid-fr1661360735aad/https://www.plex.tv)or [app.plex.tv](https://www.anrdoezrs.net/links/100317643/type/am/sid/126831-xid-fr1661360735aae/https://app.plex.tv/)in your browser. The Plex streaming platform warns that a “third-party” accessed user data, including email addresses and encrypted passwords. [two-factor authentication](https://www.anrdoezrs.net/links/100317643/type/am/sid/126831-xid-fr1661360735aaf/https://support.plex.tv/articles/two-factor-authentication/). Users who do not see this prompt should manually visit the [password reset page](https://www.anrdoezrs.net/links/100317643/type/am/sid/126831-xid-fr1661360735aab/https://www.anrdoezrs.net/links/100317643/type/am/sid/126831-xid-{xid}/https://app.plex.tv/#?resetPassword&___trxnet=cj).

Post cover
Image courtesy of "BleepingComputer"

Plex warns users to reset passwords after a data breach (BleepingComputer)

The Plex media streaming platform is sending password reset notices to many of its users in response to discovering unauthorized access to one of its ...

Plex doesn't define that detail in the sent letter. Meanwhile, the Plex.tv website experienced an outage today and is down at the time of writing this. [Plex's instructions on resetting your password](https://support.plex.tv/articles/account-requires-password-reset/) immediately to minimize the chances of account takeover. Still, this hasn't been verified yet. Plex claims that it has identified the means by which the third-party accessed the database and addressed the problem to harden its systems and prevent similar incidents from re-occurring in the future. The Plex media streaming platform is sending password reset notices to many of its users in response to discovering unauthorized access to one of its databases.

Post cover
Image courtesy of "Ars Technica"

Plex imposes password reset after hackers steal data for >15 million ... (Ars Technica)

Streaming media platform Plex on Wednesday said it was hacked by intruders who managed to access a proprietary database and make off with password data, ...

Plex is a major provider of media streaming services that allow users to stream movies and audio, play games, and access their own content hosted on home or on-premises media servers. A Plex spokesperson said that the passwords were hashed using bcrypt, among the strongest algorithms for protecting passwords. The email said that the passwords were “hashed and secured in accordance with best practices,” meaning the passwords were cryptographically scrambled in a way that requires attackers to devote additional resources to crack the hashes and revert them back to their plaintext state.

Post cover
Image courtesy of "Kotaku"

Popular Media Platform Plex Hacked, Advises Users To Change ... (Kotaku)

Plex, which millions use to stream their libraries of totally legal media, had a bit of a security breach recently.

Trips across Reddit reveal that some others may be in the dark as well, so if you have friends who enjoy Plex, politely nudge them to do the smart thing and get those passwords changed. While Plex servers typically run on PCs, Plex client apps are available on the Xbox and PlayStation store, as well as a litany of smart devices, which makes it a very convenient way to stream your media to any device, from almost anywhere. Last night Plex sent out emails notifying many of its customers that a serious security breach may have resulted in account information getting into the wrong hands.

Post cover
Image courtesy of "Laptop Mag"

Plex requires password change after hack — is your credit card info ... (Laptop Mag)

Plex is suffering from a major data breach, leaving their customers' credentials exposed to hackers.

"Rest assured that credit card and other payment data are not stored on our servers at all and were not vulnerable in this incident," Plex said. Plex maintains that users' password data is hashed and secured, but "out of an abundance of caution," it is requiring all Plex accounts to initiate a password reset. Plex revealed that it discovered "suspicious activity" on one of their databases.

Post cover
Image courtesy of "Cyber Security Hub"

IOTW: Plex urges customers to change passwords following data ... (Cyber Security Hub)

The streaming service suffered a data breach by a third-party that allowed them unauthorized access to user's login information.

Streaming services like Twitch and Plex are targets for data breaches as they hold a large amount of customer data. The company said that it “does appear” that a third party was able to “access a limited subset of data that includes emails, usernames and encrypted passwords”. Another said that the site’s crashing was “interesting timing given the data breach and hack yesterday and off the back of an urgent password reset”. Seems interesting timing given the data breach and hack just yesterday and off the back of an urgent password reset. Video game streaming service Twitch reported a data breach in October 2021 which exposed Twitch creator payout as well as data from Twitch’s source code repository. While Plex said that it had identified how the third party gained access to the database, it did not share the method with customers.

Post cover
Image courtesy of "Tech Monitor"

Plex site down after streaming platform warns of hack and urges ... (Tech Monitor)

A hack on Plex may have seen cybercriminals access user data. The company's site went down after it urged users to change passwords.

Once data has been exfiltrated, users need to be made aware immediately in case it jeopardises other accounts yet so often we see companies hold back this information from their customers until they have to which is often too late.” It also urged users to tick the box to sign out of all devices, adding that “this is a headache, but we recommend doing so for increased security”. Plex is one of the most prominent self-hosted video platforms on the market.

Post cover
Image courtesy of "TechRadar"

Plex confirms data hack, user details and passwords stolen (TechRadar)

Passwords and personal information taken, with Plex advising users to update their credentials.

[best firewalls](https://www.techradar.com/best/firewall)(opens in new tab) today [The Register](https://www.theregister.com/2022/08/24/data_breach_plex_hack) (opens in new tab) [These are the best password managers around](https://www.techradar.com/best/password-manager) (opens in new tab) Regardless, people rushed to change their login credentials, but many couldn’t do it, as Plex’s servers collapsed under the increased traffic. Plex “already addressed the method that this third-party employed to gain access to the system,” it said. [stolen](https://www.techradar.com/best/best-identity-theft-protection) (opens in new tab), the company has confirmed.

Explore the last week