Plex forcing password reset following a breach leaking data for over 15 million users

Plex has shared that one of its proprietary databases had been hacked, resulting in the stealing of 15 million users' account data.

In the statement, Plex said the following:

“Yesterday, we discovered suspicious activity on one of our databases. We immediately began an investigation and it does appear that a third-party was able to access a limited subset of data that includes emails, usernames, and encrypted passwords.”

Although the passwords were scrambled using the Bcrypt password hasher, the company is requiring every single Plex user to reset their password. In addition to this, no payment methods or details were stored in the database that was breached. The method that was used for the breach was already discovered and resolved, and reviews to prevent these breaches in the future.

Further coverage: Ars Technica