{"id":55221,"date":"2022-08-24T18:50:03","date_gmt":"2022-08-24T18:50:03","guid":{"rendered":"https:\/\/harchi90.com\/plex-imposes-password-reset-after-hackers-steal-data-for-15-million-users\/"},"modified":"2022-08-24T18:50:03","modified_gmt":"2022-08-24T18:50:03","slug":"plex-imposes-password-reset-after-hackers-steal-data-for-15-million-users","status":"publish","type":"post","link":"https:\/\/harchi90.com\/plex-imposes-password-reset-after-hackers-steal-data-for-15-million-users\/","title":{"rendered":"Plex imposes password reset after hackers steal data for >15 million users"},"content":{"rendered":"<div itemprop=\"articleBody\">\n<figure class=\"intro-image intro-left\">\n  15 million users&#8221;\/><figcaption class=\"caption\">\n<p>Getty Images<\/p>\n<\/figcaption><\/figure>\n<aside id=\"social-left\" class=\"social-left\" aria-label=\"Read the comments or share this article\">\n<\/aside>\n<p><!-- cache hit 32:single\/related:574de77324315d1e8a362940f4fbbf46 --><!-- empty --><\/p>\n<p>Streaming media platform Plex on Wednesday said it was hacked by intruders who managed to access a proprietary database and make off with password data, usernames, and emails belonging to at least half of its 30 million customers.<\/p>\n<p>\u201cYesterday, we discovered suspicious activity on one of our databases,\u201d company officials wrote in an email sent to customers.  \u201cWe immediately began an investigation and it does appear that a third-party was able to access a limited subset of data that includes emails, usernames, and encrypted passwords.\u201d<\/p>\n<p>The email said that the passwords were \u201chashed and secured in accordance with best practices,\u201d meaning the passwords were cryptographically scrambled in a way that requires attackers to devote additional resources to crack the hashes and revert them back to their plaintext state.  A Plex spokesperson said that the passwords were hashed using bcrypt, among the strongest algorithms for protecting passwords.  bcrypt automatically applies what&#8217;s known as cryptographic salting and peppering to make cracking harder.<\/p>\n<p>The company is nonetheless requiring all customers to reset their passwords.  Step-by-step instructions are here.  For good measure, the company advises signing out of all connected devices after the password change and then logging back in.<\/p>\n<aside class=\"ad_wrapper\" aria-label=\"In Content advertisement\">\n    <span class=\"ad_notice\">Advertisement <\/span>    <\/p>\n<\/aside>\n<p>The email also said that no payment card details were stored in the database that was accessed and therefore aren&#8217;t affected by the breach.<\/p>\n<p>Multiple people reported having trouble logging in to their accounts on Wednesday morning.  Security researcher Troy Hunt <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/troyhunt\/status\/1562319727896449030\" target=\"_blank\">posted<\/a> a screenshot of errors he received when trying to log in to his account.<\/p>\n<p>Two Ars staffers said they, too, initially had trouble accessing their accounts but eventually succeeded.  A third person connected to Ars reported resetting his password and receiving an email from Plex immediately afterward instructing him to once again reset his password.  The email sent him in a loop when he could not log in with the new password.<\/p>\n<p>Plex is a major provider of media streaming services that allow users to stream movies and audio, play games, and access their own content hosted on home or on-premises media servers.  The Plex spokesperson said the company has more than 30 million registered users and that the majority of them were affected by the breach.<\/p>\n<p>Wednesday&#8217;s notification said that company officials have already uncovered the means the intruders used to gain access to the database and have fixed it.  Engineers continue to do additional reviews to prevent similar breaches from occurring again.<\/p>\n<\/p><\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>15 million users&#8221;\/> Getty Images Streaming media platform Plex on Wednesday said it was hacked by intruders who managed to access a proprietary database and make off with password data, usernames, and emails belonging to at least half of its 30 million customers. \u201cYesterday, we discovered suspicious activity on one of our databases,\u201d company officials &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/harchi90.com\/plex-imposes-password-reset-after-hackers-steal-data-for-15-million-users\/\"> <span class=\"screen-reader-text\">Plex imposes password reset after hackers steal data for >15 million users<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-global-header-display":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[4],"tags":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":54858,"url":"https:\/\/harchi90.com\/plex-was-compromised-exposing-usernames-emails-and-passwords\/","url_meta":{"origin":55221,"position":0},"title":"Plex was compromised, exposing usernames, emails and passwords","date":"August 24, 2022","format":false,"excerpt":"Streaming media platform Plex sent out an email to its customers earlier today notifying them of a security breach that may have compromised account information, including usernames, email addresses and passwords. Although there is no sign that the encrypted passwords were exposed, Plex nevertheless is advising all users to change\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":54983,"url":"https:\/\/harchi90.com\/change-your-password-right-now\/","url_meta":{"origin":55221,"position":1},"title":"Change your password right now","date":"August 24, 2022","format":false,"excerpt":"Dhruv Bhutani \/ Android AuthorityTL;DR Media server app Plex has announced a possible data breach. Emails, usernames, and encrypted passwords were accessed as part of the incident. The company is requiring a password reset for all accounts. Plex is one of the most prominent media streaming and media server apps\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":55262,"url":"https:\/\/harchi90.com\/plex-suffers-serious-breach-urges-users-to-change-passwords\/","url_meta":{"origin":55221,"position":2},"title":"Plex Suffers Serious Breach, Urges Users To Change Passwords","date":"August 24, 2022","format":false,"excerpt":"photo: Alex Walker \/ Plex \/ Kotaku (Getty Images)If you make use of the popular personal media server Plex on your Xbox, PlayStation, smart TV, or just about any other device, you're going to want to update your password.Last night Plex sent out emails notifying many of its customers that\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":54950,"url":"https:\/\/harchi90.com\/plex-tells-users-to-reset-their-passwords-after-potential-data-breach\/","url_meta":{"origin":55221,"position":3},"title":"Plex tells users to reset their passwords after potential data breach","date":"August 24, 2022","format":false,"excerpt":"Plex users may want to change their passwords as soon as they're able. The digital media player and streaming service said a bad actor had infiltrated its system in a letter sent to users affected by the breach. In it, the company has revealed that it immediately started an investigation\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":56638,"url":"https:\/\/harchi90.com\/lastpass-source-code-blueprints-stolen-by-intruder-the-register\/","url_meta":{"origin":55221,"position":4},"title":"LastPass source code, blueprints stolen by intruder \u2022 The Register","date":"August 26, 2022","format":false,"excerpt":"Internal source code and documents have been stolen from LastPass by a cyber-thief. The password manager maker said on Thursday that someone broke into one of its developer's accounts, and used that to gain access to proprietary data. The we, a big beast in the security world and based in\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":21389,"url":"https:\/\/harchi90.com\/major-neopets-hack-may-compromise-tens-of-millions-of-accounts\/","url_meta":{"origin":55221,"position":5},"title":"Major Neopets hack may compromise tens of millions of accounts","date":"July 21, 2022","format":false,"excerpt":"More than 69 million neopets accounts may be compromised after a major data breach was revealed Wednesday. A neopets representative initially confirmed via Discord that the company is aware of the breach and \u201cactively working on it.\u201d Hours later, a neopets Representative published a statement on the site's forum and\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"fifu_image_url":"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2022\/08\/data-breach-hack-760x380.jpeg","_links":{"self":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/55221"}],"collection":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/comments?post=55221"}],"version-history":[{"count":0,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/55221\/revisions"}],"wp:attachment":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/media?parent=55221"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/categories?post=55221"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/tags?post=55221"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}