Security News > 2022 > August > Attacker snags account details from streaming service Plex

Attacker snags account details from streaming service Plex
2022-08-24 14:00

Users of popular streaming and media organizing service Plex are waking up to an unpleasant email this morning saying, in the words of a Reg reader, "Plex have been hacked and their main site is down as we all rush to change passwords."

All Plex users are being required to reset their passwords, per the email, though it's also unclear how mandatory or automated the change will be.

Later in the missive, Plex said it was "Kindly requesting" users reset their passwords - hardly mandatory language - and asks them to ensure they select the option to sign out of all connected services as well.

Plex began life as a streaming service mostly known for easy home media server setup, as well as offering integrations for several popular media apps.

Plex offered a cloud service that let users sync files from cloud services, but it discontinued the service in 2018, forcing cloud users to return to at-home media servers.

Plex's password reset instructions are a bit laborious, but it's a good idea not to sit on this one if you're a user, especially if your Plex account is tied to a home media server you'd like to keep secure.


News URL

https://go.theregister.com/feed/www.theregister.com/2022/08/24/data_breach_plex_hack/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Plex 1 0 1 6 1 8