Infosec News

[cyclone]

Plex Breached... Again - Reset Your Passwords Now

Plex breached again, change your password and sign out everywhere.

Plex says an attacker got into one of its databases and pulled a limited set of user data, email, username, hashed passwords, authentication data. No payment info was stored. Plex is telling all users to reset their password, tick “Sign out connected devices” during the reset, then re-enable 2FA. If you use SSO, sign out of all devices from your account security page. Expect phishing around this, Plex won’t ask for your password or card details by email.

This mirrors the 2022 incident, so treat it seriously.

Sources:

• https://forums.plex.tv/t/important-notice-of-security-incident/930523
• https://www.bleepingcomputer.com/news/security/plex-tells-users-to-reset-passwords-after-new-data-breach/
• https://www.malwarebytes.com/blog/news/2025/09/plex-users-reset-your-password