Plex hackers steal your data and passwords, not credit card details


Plex, the popular media streaming service that makes it easy to access your entire video, music, and photo catalogs from pretty much anywhere, has been hacked.

A server breach this week allowed hackers to gain access to user data — including email addresses, private messages, and forum passwords — but Plex assures us our credit card details are safe.

“At approximately 1pm PDT yesterday (July 1st) we learned that the server which hosts our forums and blog was compromised,” Plex explains on its blog. “The attacker was able to gain access to some personal information, such as IP addresses, forum private messages, email addresses, and encrypted (hashed and salted) passwords for our forum users.”

Even though those forum passwords are encrypted, Plex has reset the passwords of all users with a forum account, and sent them instructions on how to create a new one. At this time, however, the Plex forums remain offline while the company carries out its investigation into the hack.

“We have no reason to believe that any other parts of our system were compromised,” Plex adds, “and we never store credit card or other payment data on our systems.”

If you’re a Plex user, but you didn’t use the Plex forum, then you don’t have to worry; your password won’t have been taken, and you won’t have to create a new one. But if you are a forum user, be on the lookout for that email from Plex, and be sure to change your password when prompted.