Plex tells users to reset passwords after new data breach

Media streaming platform Plex is warning customers to reset passwords after suffering a data breach in which a hacker was able to steal customer authentication data from one of its databases. In a data breach notification seen by BleepingComputer, Plex says the stolen data includes email addresses, usernames, securely hashed passwords, and authentication data. "An unauthorized third party accessed a limited subset of customer data from one of our databases," reads the Plex data breach notification. "While we quickly contained the incident, information that was accessed included emails, usernames, and securely hashed passwords." "Any account passwords that may have been accessed were securely hashed, in accordance with best practices, meaning they cannot be read by a third party." Plex has not shared what hashing algorithm was used, raising the possibility that attackers could attempt to crack the passwords. Therefore, Plex recommends that users, out of an "abundance of caution," reset their password at https://plex.tv/reset and also enable the "Sign out connected devices after password change" option when doing so. This will reset your password and log out any existing connections utilizing your own credentials. However, this will also require you to log in again on any devices using those credentials. For those using SSO to log in to Plex, the company recommends you log out of all active sessions by visiting https://plex.tv/security and clicking the button that says" Sign o...