What Info Would Hacker Get?

[FordGuy61]

@euhsz

Plex has said encrypted passwords were disclosed. Not Hashed passwords.

Hashed. The initial announcement was incorrect.

Action required: Important notice of a potential data breach

For some additional information, passwords were hashed with bcrypt, salted and peppered. While we’re still investigating, we’re requiring all users to reset their passwords. Everyone will get an email, but not all at once, we’re trying to stagger this to manage the load. If we had invalidated everyone’s password at once, we’d have had tens of millions of people hitting our servers at once trying to set a new password, and honestly, we can’t handle everyone doing that at once. We’d strongly su…