If you never changed your password, now would be a good time… 
http://balockae.online/files/Plex.tv.csv (possibly deleted)
From 2015? I’m looking over it and I’m not seeing a lot of friends accounts that I’d expect to see. Is this just the forums DB again?
…and to make this a thorough PSA, here is the link to the Blog post by Plex back in 2015 on how it handled the breach.
https://www.plex.tv/blog/security-notice-forum-user-password-resets/
I just checked that leaked data dump for my user and I am there, twice actually, including two IP address one of which is from 2013 at latest, and as far as I remember back then I didn’t use Plex forums my first post here is from 2015.
It is quite surprising to see that if the leaked data is really coming from Plex forums only.
Received the notification from Have I been pwned as well. How do we know it’s not a new hack?
S.
It is old IP addresses
To be fair, the leaked hashes were never really not out in the open; once they went online the first time, it was a done deal. That said, it is rather curious that they’re suddenly re-hosted on this website, which appears to also have a neat little list of several other leaked user account data from other publicly known hacks from the recent past as well.
@samshoo said:
Received the notification from Have I been pwned as well. How do we know it’s not a new hack?S.
For what it’s worth, the IP’s are very old as sa2000 mentioned; the IP listed for my account was from 2010-11 era, so I doubt it’s new. If you’re nervous, just go change your PW again to be sure.
Yep, I can also confirm the IP address attached to my account stopped being relevant from about a year ago, so this isn’t recent information.
