Streaming platform Plex has confirmed a new data breach – and is urging customers to reset their passwords straight away.
According to Plex, an unauthorised third party gained access to one of its customer databases. Information taken includes email addresses, usernames, hashed passwords and authentication data. While Plex says the passwords were stored securely, the company has advised users to act “out of an abundance of caution.”
What Plex users need to do now
If you have a Plex account, you should:
- Reset your password immediately via plex.tv/reset.
- Select “Sign out connected devices” during the reset. This logs out all sessions that may be using your old password.
- If you log in with single sign-on (SSO), head to plex.tv/security and click “Sign out of all devices.”
- Turn on two-factor authentication (2FA) to add an extra layer of protection.
Plex has stressed that no payment details have been exposed, as it does not store card information on its servers.
Find out more about how to protect yourself following a data breach.
A repeat problem?
This isn’t the first time Plex has faced a security issue. A similar breach was reported in 2022, when users were also forced to reset their passwords. The company says it has fixed the method used by hackers this time and is carrying out further reviews to strengthen its systems.
Could a claim develop?
At this stage, there is no confirmed group action against Plex. But repeated breaches raise serious questions about whether customer data is being properly protected. If a legal claim does emerge, compensation could be available for affected users.
Register your interest
If you use Plex and want to stay updated on your rights, you can register your interest with Join the Claim today. We’ll keep you informed if a claim develops and help you check whether you could be eligible for compensation.
Join the Claim connects consumers with SRA-regulated lawyers. Keep an eye out for updates on any potential claim and possible eligibility checks/registration opportunities.