Just got an email with that as a subject line. Has Plex really been breached? Do I really need to change my password?
The message seems sincere and the links check out to be non-suspicious but I don’t know. If this is true surely many people here can vouch and say “Yeah this is legit”.
Same here. suspicious lack of any other information on the Plex website, forums and community pages or the Internet for that matter. Plex can you please confirm this is indeed the case.
Thanks
Can’t change password due to internal server error
Well at least I use a password manager for unique passwords per site and privacy.com for unique credit card numbers per site too. So I’m not specifically that worried but I would like to know what’s really happening.
Got the email too. I am inclined to believe it is real. Had plenty of slippery wording, didn’t see the word ‘salted’ in there.
So, for the sake of safety, I went ahead and logged into my account to change my password. Thing is, that didn’t work. I tried a few times, but when I submit the change password form hangs in there with a spinning icon for about 30 seconds, then I get
“Internal Server Error. Something went wrong on our end”
I hope it’s just a temporary glitch. Has anyone else tried and experienced the same issue?
I wonder if this is in response to the email with people rushing to change their password.
I got the same thing when I tried to just change my password so I followed the instructions and no email arrived. I hope Plex will address this soon!
I also get an internal server error (500) response when trying to use the password reset feature and sign out of all connected devices.
a pinned post here to confirm the authenticity of the email notification would be nice. Are SSO’s affected as well? We are in the dark here and this isnt the first time there has been a massive plex breach. 300K plus accounts was the last time i believe.
the most information i can find on this is from reddit. local auth support would be great right about now…
Sue the ■■■■ out of these ■■■■■■■■ Im tired of this ■■■■ having my information floating out there due to poor security measures. Wheres the ■■■■■■■ accountability?!?
well lovely,
just messaged all my server users telling them to throw the email away
gotta love when this happens lol
I completed resetting my password and logging out all my devices… but now, I’m unable to get my server logged back in; I can “log in” to the server with my account, but when I try to access my own Plex server I get Not authorized and
You do not have access to this server when I select it from the sidebar.
@Ss6ixspeed if you are really true to your word then just stop using the Internet! They get your info because you give it to them.
This is not the issue of this tread so take your rant somewhere else. This thread is for info about this problem, not somebody’s personal ranting and raving…
managed to change my password. now my personal library has disappeared. great way to end an afternoon
The same happened to me. Login into your local PlexWeb (ex. http://127.0.0.1:32400/) and Claim the server from there.
I sign in and access plex via my google account, I am guessing I don’t need to do anything? I do not have an active plex account per se.
I had this issue too. Had to “claim server” about half a dozen times before it finally took. Seems to be okay now.
same issue here @ph4t3 and finally got the reset password email, tried that and it still doesn’t work: The token is invalid, please request a new one. Ugh.
Wondering the same here. Im also signing in with my google. Do I then need to reset my google
password too?
