Fortunately hashes are hard to decrypt, but they are certainly crackable with enough computational resources and time. Even the passwords which were leaked from the database were hashed, and the attacker would need to decrypt them. Thankfully, with the most recent attack, credit card and other payment information was not exposed as it wasn’t stored on the company’s servers. Plex claimed back then, the attack was likely via a PHP/IPB vulnerability. The hacker also demanded a ransom for the data he was able to collect. Back in 2015, the Plex forum was hit in a major hack, and the attacker was able to obtain user data from there. This is not the first time the company is dealing with a cyber attack. The company only detected the breach when they noticed suspicious activity on that database. It seems the attackers were only able to target one of Plex’s databases, so the breach should only affect a section of Plex’s users.

Plex informed potentially affected users through an email, urging them to reset their passwords immediately. Unfortunately for its users, the service was recently hit with a data breach and the attackers might have been able to access information such as emails, usernames, and encrypted passwords.

It allows users to stream and manage their local media collection across multiple devices. Plex is likely the most well known client–server media player platform.