Security News > 2022 > August > Plex forces password resets after database access incident
The Plex media streaming platform is sending password reset notices to many of its users in response to discovering unauthorized access to one of its databases.
"Even though all account passwords that could have been accessed were hashed and secured in accordance with best practices, out of an abundance of caution, we are requiring all Plex accounts to have their password reset," claims Plex's notice.
At this time, the impact of the incident and the password reset action hasn't been specified by Plex, but the internet company characterized it as "Limited".
The password reset isn't enforced via automatic sign-outs, so those who don't log out of their accounts on existing devices may continue using Plex, but encounter media collection access issues.
Plex doesn't define that detail in the sent letter.
Plex users can add a 2FA step in their login process for additional account security by following the instructions here.