Streaming giant PLEX urges its customers to disclose data breaches of one of its user databases to change their passwords.
The company said In the post On Monday, it was aware of security incidents involving theft of PLEX customer account information, including usernames, email addresses, passwords and unspecified authentication data.
Although the password is pieced together in a way that makes it unreadable, it is not clear whether the password can be decrypted or whether it can be accessed with stolen authentication data, PLEX said.
The company said customers should change their passwords by visiting Plex Password reset form. PLEX also requires the user to log in to the connected device.
While it is common for organizations experiencing data breaches of user information (even if this data is disrupted) it is possible to force passwords to prevent malicious access to customer accounts, it is not clear why PLEX chose not to adopt this approach.
Plex has little to say about the breach, although the company does say the company “solves the approach that third parties use to access the system.” PLEX does not specify more details, nor does it specify the risks of its customers.
The company did not say how many customers were affected. PLEX has about 25 million users around the world. According to its website. When a violation or the time of access by a hacker, whether PLEX discovered the violation or event was limited to PLEX’s own system, and it was not known whether the hacker’s access time was.
PLEX has not described the nature of the cyber attack, or if the company receives any communication from a hacker, such as having already made a ransom demand.
When arrived via email, PLEX spokesman Jessica Finn did not provide an answer to TechCrunch at press time.
Do you know more about PLEX data breaches? Have you notified of the violation? Contact this reporter safely on Signal via ZackWhittaker.1337.
