Other

All Plex users should reset passwords in wake of data breach

By Sead Fadilpašić

Copyright techradar

All Plex users should reset passwords in wake of data breach

Skip to main content

Tech Radar Pro

Tech Radar Gaming

Close main menu

the business technology experts

België (Nederlands)

Deutschland

North America

US (English)

Australasia

New Zealand

View Profile

Search TechRadar

Expert Insights

Website builders

Web hosting

Best web hosting
Best office chairs
Best website builder
Best antivirus
Expert Insights

Don’t miss these

PBS reveals data breach after company info leaked on Discord

Worrying attack sees 10,000 records allegedly belonging to VirtualMacOSX leaked – here’s what we know

Pandora confirms data breach – customer data stolen, here’s what we know

Wealthsimple reveals data breach – users of financial firm warned to be on alert

Massive streaming service data leak sees over 324 million records breached – here’s what we know

Passwordstate users should patch this auth bypass vulnerability immediately, company says

Apple, Google, Microsoft and Facebook details exposed in huge breach affecting 184 million accounts – secure your logins now

TransUnion data breach may have affected 4.4 million users – here’s what we know, and how to stay safe

“No evidence” – here’s why the massive 16 billion record data breach may not be as bad as first thought

Venice Film Festival hacked, attendee data leaked online

Insurance giant Allianz Life says data on over a million US customers stolen in breach – here’s how to stay protected

800,000 users at risk after MAJOR hack at betting giants — IP addresses, email addresses, and online activity compromised

Major data breach at US credit union sees 172,000 customers at risk – here’s how to stay safe

Lovense adult toy app leaks private user email addresses – what we know, and how to stay safe if you’re affected

Allianz Life data leaked following recent breach – our tips on how to stay safe

All Plex users should reset passwords in wake of data breach

Sead Fadilpašić

9 September 2025

Media streaming giant warns of a cyberattack

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

(Image credit: Shutterstock)

Plex suffered a data breach exposing emails, usernames, and hashed passwords
Users are urged to change passwords and enable two-factor authentication
A separate vulnerability in Plex Media Server was patched in August

Popular media server and streaming platform, Plex, warned its users about losing their sensitive data in a cyberattack, and urged them to update their passwords as a result.

In a forum post published on September 8, Plex said it recently experienced a security incident with “limited impact”, when an unauthorized third party accessed a subset of customer data.
“While we quickly contained the incident, information that was accessed included emails, usernames, securely hashed passwords and authentication data,” the post reads. Credit card or other payment data was not accessed since it wasn’t even stored on company servers.

You may like

PBS reveals data breach after company info leaked on Discord

Worrying attack sees 10,000 records allegedly belonging to VirtualMacOSX leaked – here’s what we know

Pandora confirms data breach – customer data stolen, here’s what we know

Hashed passwords are unreadable
The passwords were hashed “in accordance with best practices,” Plex further stated, explaining that the hackers cannot read them. Still, to be on the safe side, the company recommends users log out of all sessions, and change all passwords. It also stresses that it will never reach out via email to ask for a password or credit card number, hinting that the miscreants might start sending phishing attacks to the email accounts they obtained in the attack.

“For further account protection, we also recommend enabling two-factor authentication on your Plex account if you haven’t already done so.”
As a media server and streaming platform, Plex lets users collect, organize, and stream personal media such as movies, TV shows, music, photos, and more on almost any device. It is quite popular, with some sources claiming it has more than 25 million active users.
In mid-August this year, Plex said it patched a mysterious vulnerability affecting its Plex Media Server product, and has told users to not to delay applying the fix. The company received a report via its bounty program about a potential security issue affecting Plex Media Server versions 1.41.7.x to 1.42.0.x and soon after, came forward with a patch.

Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
Via BleepingComputer
You might also like

Plex warns users to update systems immediately after detecting worrying security issue – here’s what we know
Take a look at our guide to the best authenticator app
We’ve rounded up the best password managers

Sead Fadilpašić

Social Links Navigation

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

PBS reveals data breach after company info leaked on Discord

Worrying attack sees 10,000 records allegedly belonging to VirtualMacOSX leaked – here’s what we know

Pandora confirms data breach – customer data stolen, here’s what we know

Wealthsimple reveals data breach – users of financial firm warned to be on alert

Massive streaming service data leak sees over 324 million records breached – here’s what we know

Passwordstate users should patch this auth bypass vulnerability immediately, company says

Latest in Security

UK policing watchdog finds National Crime Agency heavily reliant on weak legacy systems

GitHub supply chain attack sees thousands of tokens and secrets stolen in GhostAction campaign

Insider breaches are a bigger security threat than ever before – here’s how your business can stay safe

This creepy spyware watches you through your webcam and snaps incriminating photos

SAP users patch now – worrying S/4HANA vulnerability being exploited in the wild

Hackers are sneaking malware into SVG images to bypass antivirus – here’s what we know

Latest in News

Skate Early Access roadmap – here’s when to expect major updates

We’ve been patiently waiting for an Apple Ring for years – but will it make an appearance at today’s huge Apple Event?

The new Polestar 5 Grand Tourer has the Porsche Taycan in its sights – and yes, there’s still no rear windscreen

Hollow Knight: Silksong’s first post-launch patch arrives next week and will address early game difficulty with some ‘slight balance adjustments’

Some older Garmin smartwatches are suffering from screen problems – is yours affected?

Nova Launcher is seemingly shutting down – so here are some alternatives

LATEST ARTICLES

AMD’s FSR 4 upscaling tech gives even more PC games a free image quality upgrade – but you still need a modern GPU

The new Polestar 5 Grand Tourer has the Porsche Taycan in its sights – and yes, there’s still no rear windscreen

Skate Early Access roadmap – here’s when to expect major updates

Windows 11 25H2 update might disappoint if you were hoping for better performance, new report suggests

We’ve been patiently waiting for an Apple Ring for years – but will it make an appearance at today’s huge Apple Event?

TechRadar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.

Contact Future’s experts

Terms and conditions

Privacy policy

Cookies policy

Advertise with us

Web notifications

Accessibility Statement

Future US, Inc. Full 7th Floor, 130 West 42nd Street,

Please login or signup to comment

Please wait…