Following the data breach notification, changing my own password and configuring MFA I decided to boot the two family members using my account credentials and give them library access via their own accounts/logins; in other words, I forced them to signup for a Plex account.
However, they both received breach notices; and one of them freaked out (an older person).
I really appreciate the way Plex handled the breach notifications, but there’s something odd about accounts created after the breach notice initially went out getting the notice (and therefore couldn’t have been part of the breach unless it was ongoing).
At the very least, since it’s impossible to send a support message, I thought I’d let the engineers know something is up with their notification system. New accounts shouldn’t be getting the “change your password because we’ve been hacked” email.
