Plex urges users to change passwords after data breach

Plex disclosed a security incident in which a third party accessed and exfiltrated customer account information — including usernames, email addresses, scrambled passwords, and unspecified authentication data. The company told users to change passwords and sign out connected devices but did not force password resets, reveal the hashing algorithm, state how many customers were affected, or provide a timeline, leaving the scope and risk (including whether passwords can be cracked) unclear.