We have recently experienced a security incident that may potentially involve your Plex account information. We believe the actual impact of this incident is limited; however, action is required from you to ensure your account remains secure.
What happened
An unauthorized third party accessed a limited subset of customer data from one of our databases. While we quickly contained the incident, information that was accessed included device type, emails, usernames, and authentication data.
What we're doing
We’ve already addressed the method that this third party used to gain access to the system, and we’re undergoing additional reviews to ensure that the security of all of our systems is further strengthened to prevent future attacks. We remind you that no one at Plex will ever reach out to you over email to ask for a password or credit card number for payments.
What you must do
We kindly request that you log out of all active sessions by visiting
https://plex.tv/security and clicking the button that says ”Sign out of all devices”. This will sign you out of all your devices (including any Plex Media Server you own) for your security, and you will then need to sign back in using the same single sign on method used previously (ex: Google, Apple, etc). We understand that this means a little more work for you, but it will provide additional security to your account.
Thank you,
The Plex Team
