Plex just got owned by hackers, and if you’re one of the millions streaming The Office for the 847th time, you might want to pay attention.
The streaming giant confirmed in a company blog post that hackers managed to break into one of their databases and make off with a “subset” of user data.
Translation: your username, email, and hashed password are now floating around the dark web like digital tumbleweeds.
Here’s the good news (if you can call it that): Plex doesn’t store your credit card info, so at least your bank account isn’t getting drained while you binge Parks and Rec.
The company was quick to reassure users that financial data stayed safe because, shocker, they actually follow basic security practices and don’t store that stuff.
But here’s the thing about “securely hashed” passwords — they’re only as secure as your creativity. Sure, Plex followed best practices, but if your password is “password123,” even the most sophisticated hashing won’t save you.
Plex is forcing password resets on affected accounts (you’ll know if you’re hit), and they’re strongly suggesting you enable two-factor authentication. Not asking. *Strongly suggesting* — which basically means “do it or suffer the consequences.”
The company claims they’ve patched the security hole and are doing the whole “comprehensive infrastructure review” song and dance. .
Bottom line: Change your password, turn on 2FA, and maybe consider if “hunter2” is really the pinnacle of digital security. Your Netflix queue can wait five minutes.
