Media streaming platform Plex has been hacked with consumer passwords and private knowledge stolen (opens in new tab), the corporate has confirmed.

Plex despatched out an e mail notification to its customers explaining the state of affairs, and asking them to alter passwords as quickly as attainable.

The e-mail famous a “restricted subset” of accounts had been compromised, however the stolen knowledge was “hashed and secured in accordance with greatest practices”. 

Plex passwords

No extra particulars have been offered, together with how the breach occurred, what number of customers had been affected, or whether or not or not the passwords had been salted. 

The one factor we do know is that fee knowledge was not stolen, as Plex says it doesn’t maintain that form of knowledge round, and that no matter gap the risk actor crawled via, was patched. Plex “already addressed the strategy that this third-party employed to realize entry to the system,” it stated.

It’s also value mentioning that customers had been “kindly requested” to alter their passwords, suggesting that the replace isn’t obligatory. Regardless, folks rushed to alter their login credentials, however many couldn’t do it, as Plex’s servers collapsed beneath the elevated visitors.

This isn’t the primary time Plex’s cybersecurity points have made the headlines. In early 2021, it was found that DDoS-for-hire providers had been leveraging some safety flaws in Plex Media Server methods as a UDP reflection/amplification vector in DDoS assaults.

This isn’t the primary time Plex’s cybersecurity points have made the headlines. In early 2021, it was found that DDoS-for-hire providers had been leveraging some safety flaws in Plex Media Server methods as a UDP reflection/amplification vector in DDoS assaults.

The corporate was fast to react to the information, issuing a software program patch that mounted the issue.

• Here is our rundown of the perfect firewalls (opens in new tab) at the moment

Through: The Register (opens in new tab)