Plex: Important notice of a potential data breach

Re:Plex: Important notice of a potential data breach by withinrafael on Wednesday August 24, 2022 @02:00AM (#32575434)

This disclosure is no where to be found on their website or blog, and it provides no timeline, no details about the attack, and no details about what data was accessible beyond "a limited subset of data that includes emails, usernames, and encrypted passwords". Very very frustrating.

As of Aug 23 11:24PM PST, Password change page is sort of working, at times displaying error message "Internal Server Error. Something went wrong on our end". I was able to get my request through. Shortly after, a server instance started showing unclaimed status and reassociating it resulted in "Plex is down for maintenance \ Don't worry, it will be back soon \ status.plex.tv".

[ Parent | on HN ]

Re:Plex: Important notice of a potential data breach by ResNet on Wednesday August 24, 2022 @03:54AM (#32576122)

It appears the password change works fine if you deselect the "Sign out connected devices" box. [1]

[1] https://twitter.com/troyhunt/status/1562329358282285057

[ Parent | on HN ]

Re:Plex: Important notice of a potential data breach by rcarmo on Wednesday August 24, 2022 @04:10AM (#32576238)

Mine worked fine with that checkbox on. However, I cannot get my home server to appear again, even after getting a new claim and restarting it.

[ Parent | on HN ]

Re:Plex: Important notice of a potential data breach by c0nsumer on Wednesday August 24, 2022 @08:27AM (#32578470)

This is exactly what I had happen as well.

I'm going to give it some time. I also even went through these steps (https://support.plex.tv/articles/204281528-why-am-i-locked-o...) without success.

[ Parent | on HN ]

Re:Plex: Important notice of a potential data breach by danielx on Wednesday August 24, 2022 @08:58AM (#32578844)

It didn't work for me after restarting with a new claim and when i checked the preferences it contained `PlexOnlineToken=""`.

After removing the attribute entirely it was able to successfully reclaim the server.

[ Parent | on HN ]

Re:Plex: Important notice of a potential data breach by c0nsumer on Thursday August 25, 2022 @01:03PM (#32596639)

So a coworker suggested I try accessing my Plex instance by internal IP, not internal hostname. And that... worked. When using hostname, the way I always had for everything else, it'd show that I didn't have access to the server.

[ Parent | on HN ]

Re:Plex: Important notice of a potential data breach by c0nsumer on Wednesday August 24, 2022 @10:14AM (#32579731)

I had the same "", but after restarting all the web interface says is Connecting. Then the server just doesn't show up in the list. <sigh> Might just need to blow up my whole config and reimport everything.

[ Parent | on HN ]

Re:Plex: Important notice of a potential data breach by bshep on Wednesday August 24, 2022 @09:06AM (#32578936)

I got it claimed again after several tries. I suspect they are getting hammered by a lot of people doing the same thing (changing passwords)

[ Parent | on HN ]