Sorry but your non-explanation is not good enough! What’s with this crap of: “An unauthorized third party accessed a limited subset of customer data from one of our databases. While we quickly contained the incident, information that was accessed included emails, usernames, securely hashed passwords and authentication data.”
Where is your database stored? It makes zero sense of a limited breach but at the same time you quickly contained it! Was this breach at the location of your physical computers and maybe a recently fired employee whose access card hadn’t been deactivated yet, gained access to your database? Did you notice this RED Flag and immediately cut off this person’s access? Or was the data breach remote and it was picked up, which caused you to cut the hacker’s Internet connection?
If this data breach was remote, you owe your customers an explanation as to what type of corporate Internet third party security system you’re using IF any at all. Right now, there’s zero proof Plex has any sort of paid corporate Internet security! Because this type of data breach of basic logon information should be stored in a computer network that has a firewall protection, preventing unauthorized access. So pray tell, how in the world if you’re paying for a high quality Internet security system from a third party that such a data breach is even possible - HUH?
If you so-called quickly contained this data breach then it sounds more like an internal sabotage scenario by an insider with a grudge - am I correct? But one way or another you owe your customers a clear and concise explanation of what actually happened opposed to the garbage PR statement you’ve put out! You need to be honest about whether it was an internal matter versus an outside remote connection. Because if this data breach was from an outside remote connection, that means your Internet security system is crap or it means you never invested in any corporate third party Internet security system. However, if this was an internal matter then that changes the picture altogether. You need to tell your customers, which type of breach it was and most importantly, how you’re going to prevent such a reoccurrence from happening EVER AGAIN!
