Security News > 2022 > August > Plex warns users to reset passwords after a data breach

The Plex media streaming platform is sending password reset notices to many of its users in response to discovering unauthorized access to one of its databases.
"Even though all account passwords that could have been accessed were hashed and secured in accordance with best practices, out of an abundance of caution, we are requiring all Plex accounts to have their password reset," claims Plex's notice.
The password reset isn't enforced via automatic sign-outs, so those who don't log out of their accounts on existing devices may continue using Plex, but encounter media collection access issues.
If you might be using the same credentials on other websites, you should reset your passwords there too.
Remember, encryption doesn't make passwords uncrackable either at present or in the future, as that depends on the type of algorithm used for securing the stored passwords.
Plex users can add a 2FA step in their login process for additional account security by following the instructions here.
News URL
Related news
- GrubHub data breach impacts customers, drivers, and merchants (source)
- HPE notifies employees of data breach after Russian Office 365 hack (source)
- Fintech giant Finastra notifies victims of October data breach (source)
- US drug testing firm says data breach impacted 3.3 million people (source)
- US drug testing firm DISA says data breach impacts 3.3 million people (source)
- Background check, drug testing provider DISA suffers data breach (source)
- Data breach at Japanese telecom giant NTT hits 18,000 companies (source)
- PowerSchool previously hacked in August, months before data breach (source)
- Western Alliance Bank notifies 21,899 customers of data breach (source)
- Sperm donation giant California Cryobank warns of a data breach (source)