### Plex Data Breach: A Persistent Issue
In 2022, Plex, a widely-used media server service, faced a major data breach that exposed usernames, email addresses, and encrypted passwords of its users. In the aftermath of this event, the company required all users to update their passwords as a safety precaution. However, recent messages indicate that a similar situation may be occurring again.
#### Overview of the 2022 Breach
During the initial breach, an external entity accessed a limited amount of user data, including emails, usernames, and encrypted passwords. Plex acted quickly to manage the situation and encouraged users to strengthen their account safety by updating their passwords.
#### The 2025 Incident
Now, in 2025, Plex has reported yet another data breach involving unauthorized access to a limited segment of customer data. The company mentioned that although they promptly contained the breach, the exposed information still comprised emails, usernames, and securely hashed passwords.
#### User Communication and Recommendations
In a recent communication sent to users, Plex seems to take a somewhat conflicting stance regarding password resets. Initially, the message advises users to change their passwords “out of an abundance of caution,” stressing that the accessed passwords were securely hashed and thus unreadable to third parties. However, as the email progresses, the tone becomes more urgent, compelling users to reset their passwords without delay.
The email provides a link for password resets and recommends that users check a box to log out connected devices after the password update. This action is suggested to enhance security, ensuring that all devices are signed out and will need the new password for access.
#### Security Measures and Future Steps
Plex has reassured users that it has fixed the vulnerability that permitted unauthorized access and is undertaking additional security evaluations to avert future breaches. While the company has not made a compulsory password change this time, it is sensible for users to heed the advice to reset their passwords to improve their account security.
#### Conclusion
The reoccurrence of data breaches at Plex underscores the ongoing difficulties organizations encounter in protecting user information. Users are urged to stay alert and proactive in managing their account security, especially given these recent developments.
