Just got an email with that as a subject line. Has Plex really been breached? Do I really need to change my password? The message seems sincere and the links check out to be non-suspicious but I don’t know. If this is true surely many people here can vouch and say “Yeah this is legit”.

same question here. I don’t have a password, so I am guessing that is less bad…

This is a prime example of why I loathe systems that are too automated. Give me the option to reset things manually instead of relying on auto detection and resolution.

What good is two source verification if someone can still get access? I prefer to have the second source send me an email to verify the source.

After much confustion, got it going with my couple of PMS machines. Assuming you got the password change confirmed and completed, you have to access the PMS via a browser using the IP Address of the PMS, i.e. http://10.10.10.1:32400/web/index.html#!/ Did a restart of the PMS service on the machine …

I have the same issue, After a lot of retries, I have managed to reset my password but not connect to my Synology NAS. Says off-line. I am remote from my server and upgraded everything a few days ago. I don’t care too much if it is offline, so long it is not hackable and that this Plex security brea…

This Worked for me finally: [image] Changed admin password and now admin doesn't have access to the local media server NAS & Devices There is a similar method for other hosts: SSH into the machine / get into the container , etc as required. Stop Plex Edit Preferences.xm…

I was able to regain my Synology NAS by using http://192.168.0.19:32400/web/index.html#!/ locally. Of course this would depend on it’s address on your local network. I’m afraid I can’t speak to a remote access address, but hopefully this will help get you on the right track. Good luck!

In a crisis like this you would expect to receive official information as soon as possible. But, well, it is Plex, so we get silence. And a nonsense explanation some days later.

I’ve reset my password twice now, and all my devices are being left logged in except my server itself. I’m able to reclaim it fine, it’s just this doesn’t seem to be logging everything else out like the checkbox is supposed to do. Not sure if that’s a blessing in disguise or what. :man_shrugging:

Observation: If Plex worked like Jellyfin, with locally controlled authentication, this breach would have never happened – since there would be no corporate mothership to hack then. Arguably you can do this both ways. Have the actual server admin and authentication done on the Plex server, and then…

Action required: Important notice of a potential data breach

General Discussions

Roel7 August 24, 2022, 7:54am 86

This Worked for me finally:

For docker I exec’d bash into the plex container and ran the command there

Topic		Replies	Views
So Plex was hacked, what now? General Discussions	122	10853	December 18, 2025
Security password reset General Discussions	98	2208	August 25, 2022
[implemented] Two Factor Authenticator for Plex account Feature Suggestions	500	25884	June 20, 2021
Unable to access server after password reset Plex Media Server server-synology	322	8592	February 19, 2026
Plex Server scans for wallets? Plex Media Server server-linux	191	5516	September 14, 2022

Action required: Important notice of a potential data breach

Related topics