Plexpopular content streaming service, is notifying its customers via email that it has been the victim of a data breach through which they could leakage of usernames, e-mail addresses and encrypted passwords.

Plex is an old well-known service streaming which is used by about 20 million people who themselves transfer videos, audio and photos. It stands out as one of the best solutions in its segment, has a redistributable client and server, and also offers an ever-increasing variety of content to paying subscribers.

In an email sent to customers, Plex explains this yesterday you discovered suspicious activity in one of your databases prompting her to immediately begin an investigation. The company concluded that apparently “the third party had access to a limited subset of the data, including encrypted emails, usernames and passwords“. Additional data such as credit card and payment details were not disclosed and Plex believes that “the actual impact of this incident is limited“.

As we have already said, encrypted passwords are among the allegedly leaked data. If Plex has applied best practices on this front (which it claims it does), that means attackers will have a hard time getting raw passwords, which is ultimately what allows access to accounts, but never comes anyway. extreme measures and change them to avoid disappointment.

The company explained that it is analyzing the method used by a third party that infiltrated its systems in order to harden them to prevent further intrusions of similar properties. However, Plex chose to warn and not force users to change their password recommends checking the “log out of connected devices after password change” box as an additional security measure and enabling two-step verification.

The mass notification seems to have led to some saturation of the Plex servers, as some users reported a few hours ago that they were unable to change their password due to an internal server error (500) when using the reset mechanism.

In summary, if you are a Plex customer, we strongly recommend that you immediately change your password under the terms set by the company and activate two-step verification. In this context, using a password manager can help strengthen security by generating words that are difficult to guess using brute force.