I received an email in the wee hours of the day that my Plex account was signed in from a remote location Dhaka, Bangladesh. As soon as I saw it, immediatly changed my password and signed everything out. My question is, is it possible to see what was accessed from the account, was any of the videos accessed, if yes which ones or which servers? After this I am going to make changes however on my end to better use the product, it would be necessary to know what was accessed. Is there a log that can be download or accessed on the account?
I also wonder if Plex’s security was breached recently and there are other accounts with this problem.
Usually these attackers are after your account with its Plex Pass and not after your content.
Whether any content was accessed, you can check by going to your Dashboard (click first on the ‘Activity’ icon at the top) in the web app app.plex.tv
Scroll down a bit, until you reach the Play History – there is a smaller link titled “View Full History”.
breaching the email account, by using either a “dictionary attack” or exploiting weaknesses in web browsers, web sites or publicly accessible computers, from where the typed-in credentials are siphoned off
using a dictionary attack on the Plex account, by brute-forcing commonly used and/or easily guess-able passwords
trying leaked email/password combinations from other websites or services. People who tend to use always the same password for multiple websites are vulnerable to this.
