One of the internal databases of a media streaming platform, Plex, was compromised due to a cyberattack that forced them to send password reset notifications to all its users. Several critical data are involved in the data theft against Plex, including usernames, encrypted passwords, and email addresses.
As read from the notice that the media streaming platform sent to its users, they highly recommend having their passwords reset immediately. This recommendation is advised despite the assured security of the stolen hashed passwords so that everyone could ensure further safety of their user accounts.
Moreover, Plex assured the affected users that their banking data, such as credit card details, were not stored in the compromised server. Their security team had identified how the unauthorised entities had accessed their servers, thus implementing stronger measures to protect it more and prevent similar incidents from happening again.
The media streaming platform described the incident as limited, but they provided no further updates as of writing.
Plex’s website does not technically enforce password reset to users, and their accounts were not automatically logged out of their browsers, although people are advised to do it for more security.
However, many users reported internal server errors during account password update attempts. For that issue, experts recommend users follow the provided instructions of the media streaming platform for resetting their passwords.
Suppose the affected users also use their Plex passwords on their other accounts all over the internet. In that case, it is highly advised to change them since threat actors could find ways to utilise the critical data they are holding for other hacks even if they cannot use it anymore for the previously compromised account where the password had already been updated.
Implementing multi-factor authentication for online accounts anywhere on the internet is also useful. This security tool significantly helps users to secure their accounts more against potential compromises and hacking.
