Plex security breach — change passwords immediately
Plex security breach — change passwords immediately Plex has announced a security incident in which an unauthorized third party accessed a limited subset of user account data. Plex says some customers had their email addresses, usernames and hashed passwords exposed. Credit card data was not stored on Plex servers and was not compromised. What Plex says Official announcement: Plex support announcement Plex confirmed the incident was announced on September 9, 2025. Passwords were hashed (scrambled), reducing the chance they were readable, but Plex advises caution. What you should do now Change your Plex password immediately: Reset password. When resetting, choose the option to sign out connected devices to force reauthentication across sessions. Enable two-factor authentication (2FA) for your account via Plex Security settings. If you use third-party sign-ins (Google, Apple),…