Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesSome links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Plex did suffer a security incident, according to its own disclosure dated September 8, 2025. Plex said a limited subset of customer data—including email addresses, usernames, securely hashed passwords and “authentication data”—was accessed. If you sign in with a Plex password, reset it and sign out connected devices. If you use Google or Apple sign-in, sign out of all active Plex sessions instead.
This is separate from Plex’s earlier August 22, 2022 incident, when the company said email addresses, usernames and encrypted passwords were accessed and required users to reset their passwords.
What happened to Plex?
Plex disclosed the newer incident in an official security notice published on September 8, 2025. The company described unauthorized access to a limited subset of customer data.
Plex has not said how many accounts were affected, identified the unauthorized party or provided a detailed account of the attack. It also has not explained exactly what it meant by “authentication data.” That phrase may help explain why Plex advised users to sign out of devices, but it should not automatically be interpreted as confirmation that tokens or session credentials were stolen.
#1 Best Overall
- Entry-level NAS Personal Storage：UGREEN NAS DH2300 is your first and best NAS made easy. It is designed for beginners who want a simple, private way to store videos, photos and personal files, which is intuitive for users moving from cloud storage or external drives and move away from scattered date across devices. This entry-level NAS 2-bay perfect for personal entertainment, photo storage, and easy data backup (doesn't support Docker or virtual machines).
- Set Your Devices Free, Expand Your Digital World: This unified storage hub supports massive capacity up to 64TB.*Storage drives not included. Stop Deleting, Start Storing. You can store 22 million 3MB images, or 2 million 30MB songs, or 43K 1.5GB movies or 67 million 1MB documents! UGREEN NAS is a better way to free up storage across all your devices such as phones, computers, tablets and also does automatic backups across devices regardless of the operating system—Window, iOS, Android or macOS.
- The Smarter Long-term Way to Store: Unlike cloud storage with recurring monthly fees, a UGREEN NAS enclosure requires only a one-time purchase for long-term use. For example, you only need to pay $459.98 for a NAS, while for cloud storage, you need to pay $719.88 per year, $2,159.64 for 3 years, $3,599.40 for 5 years. You will save $6,738.82 over 10 years with UGREEN NAS! *NAS cost based on DH2300 + 12TB HDD; cloud cost based on 12TB plan (e.g. $59.99/month).
- Blazing Speed, Minimal Power: Equipped with a high-performance processor, 1GbE port, and 4GB RAM on Board, this NAS handles multiple tasks with ease. File transfers reach up to 125MB/s—a 1GB file takes only 8 seconds. Don't let slow clouds hold you back; they often need over 100 seconds for the same task. The difference is clear.
- Let AI Better Organize Your Memories: UGREEN NAS uses AI to tag faces, locations, texts, and objects—so you can effortlessly find any photo by searching for who or what's in it in seconds. It also automatically finds and deletes similar or duplicate photo, backs up live photos and allows you to share them with your friends or family with just one tap. Everything stays effortlessly organized, powered by intelligent tagging and recognition.
The incident should not be confused with Plex’s previous disclosure from August 22, 2022. That notice said a limited subset of data—including email addresses, usernames and encrypted passwords—had been accessed, and Plex required all users to reset their passwords.
What information was exposed?
September 2025 incident
- Email addresses
- Usernames
- Securely hashed passwords
- “Authentication data,” without further public detail in the cited notice
August 2022 incident
Plex said the accessed information included email addresses, usernames and encrypted or hashed passwords. It said passwords were protected with bcrypt, salting and peppering.
Plex said credit-card information was not stored on its servers and was not compromised in the disclosed incidents. The notices did not establish that Plex media files, local libraries or personal video collections were accessed. They also did not say that every account was compromised or that passwords were exposed in plaintext.
Recommended Free Tools
What Plex users should do now
If you sign in with a Plex password
- Open a private or incognito browser window.
- Type
https://plex.tv/resetinto the address bar rather than following a link in an unexpected email. - Enter the email address associated with your Plex account.
- Use the newest reset email. Plex says requesting a newer reset invalidates earlier reset links.
- Create a long, unique password that you have not used anywhere else.
- Enable Sign out connected devices after password change when offered.
- Sign back in to Plex apps and any Plex Media Server installations that were logged out.
- Enable Plex two-factor authentication if it is available on your account and is not already enabled.
Plex’s password-reset support page is the authoritative source for the current reset flow.
Rank #2
- NextGen TV certified - watch live TV on multiple devices simultaneously throughout your home with our Multi room Multi user network tuner solution
- Full whole-home DVR by connecting a USB hard drive - no subscription required (paid TV guide available for advanced auto-record features)
- ATSC 1.0 content is compatible with Android, FireTV, AppleTV, Roku, Sony, XBox, iPhone, iPad, Win10/11, Mac
- ATSC 3.0 DRM-free content is compatible with Android, FireTV, AppleTV, Roku Ultra 4800X and newer, iPhone, iPad, Win 10/11, Mac. Not compatible with DRM protected channels
- 4 tuners (2 ATSC 3.0, all 4 ATSC 1.0)
If you use Google or Apple sign-in
Do not reset a separate Plex password unless your account actually has one. Instead:
- Sign in to Plex through your normal Google or Apple sign-in method.
- Open
https://plex.tv/security. - Select Sign out of all devices.
- Sign back in to Plex apps and servers as needed.
- Secure the underlying Google or Apple account separately, particularly if its password is reused elsewhere or two-factor authentication is disabled.
Important warning for Plex Media Server owners
Possible symptoms include a server appearing offline or unavailable, missing libraries in the web interface or client apps, requests to reclaim the server, remote-access clients requiring another sign-in, and third-party Plex integrations needing fresh authentication.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchThat does not by itself prove that the server was hacked. It may simply be an authentication or reclaiming problem caused by the account-security action.
Rank #3
- Server-Class Home Server Built for 24/7 Workloads - Designed as a purpose-built home server rather than general-purpose SBCs, Mini PCs, entry NAS systems, or routing-only devices. As a compact, pocket-sized single board server platform, ZimaBoard 2 832 combines x86 architecture, quad-core performance up to 3.6GHz, 8GB DDR5 memory, and 32GB eMMC storage for reliable always-on home servers, homelabs, and self-hosted workloads.
- PCIe 3.0 x4 Expansion for Real Server Builds - Built as a server-class platform with native PCIe expansion, ZimaBoard 2 features a full PCIe 3.0 x4 slot for high-speed, low-latency upgrades beyond USB-based limitations. Supports 10GbE NICs, NVMe adapters, GPUs, and AI accelerators to build scalable home servers, homelabs, and advanced self-hosted systems—offering greater expansion flexibility than typical SBCs, Mini PCs, and entry-level NAS devices.
- Native Dual SATA & Dual 2.5GbE Networking - Built with server-class storage and networking I/O, ZimaBoard 2 integrates dual SATA ports for direct HDD/SSD connectivity and dual 2.5GbE Ethernet for high-throughput, low-latency networking. This architecture enables reliable DIY NAS, fast storage, routing, and multi-service home server deployments—while avoiding USB-based performance constraints common in ARM SBCs, Raspberry Pi–based setups, Mini PCs, and entry-level NAS devices.
- ZimaOS Preinstalled + Wide OS Compatibility - Comes preinstalled with ZimaOS for a clean, ad-free private cloud experience—centralized file dashboard, automatic backups, P2P downloads, private photo/video sharing, 500+ plug-ins, and secure on-device AI that keeps your data at home. Also supports TrueNAS, Proxmox, Debian, Ubuntu Server, pfSense, OpenWrt, and Linux containers, making it perfect for Plex media servers, Pi-hole, firewalls, backups, Docker labs, home-cloud services, and multi-service deployments.
- All-in-One NAS, Router, Docker & Homelab Server - Replace multiple devices with one low-power, fanless system. ZimaBoard 2 can serve as a NAS, router, Docker host, firewall, media server, or homelab node—delivering a flexible, open alternative to ARM SBCs, Mini PCs, and entry-level NAS systems.
Before changing credentials, note the server’s platform, installation method and location. Afterward, try signing in through the local Plex Web interface and follow Plex’s official reclaim process if prompted. Do not delete the Plex database or configuration directory as a first troubleshooting step.
Recovery can differ substantially between Windows, Linux, Docker, Synology, QNAP, NAS and headless installations. Plex community reports document platform-specific authentication and reclaiming problems after the 2025 incident, including this support discussion, but forum workarounds are anecdotal and should not be treated as universal commands. For a remote or headless server, use the relevant Plex documentation or contact Plex support.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.If the reset email does not arrive
Plex says a reset message may arrive within a minute or two, but delivery can be delayed by Plex or your email provider. Check:
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →- Spam, junk, trash, promotions and quarantine folders
- Mailbox rules, forwarding filters and blocked-sender settings
- Whether you entered the correct account email address
Plex identifies [email protected] and [email protected] as addresses users may need to allow. Request another reset only after checking your mailbox; only the newest link will work.
Rank #4
- Stream thousands of FREE movies and TV shows from filmmakers around the world with big hits from Crackle, Warner Brothers, MGM, Lionsgate and more! Enjoy everything from Oscar award-winning movies to anime, documentaries, family-friendly shows, and much, much more.
- Watch 600+ channels of free live programming—instantly. From food to news to sports to kids to international content, there's something for the whole family.
- Magically organize all your personal media—photos, music, movies, shows, even DVR-ed TV—and stream it to any device in a beautiful, simple interface; Plex adds rich descriptions, artwork, and other related information.
- 30-second skip, variable speed playback, rich discovery, and full Plex-style support for cross-device playback status (including On Deck, so you can pick back up where you left off on any device).
If you are still signed in to Plex Web, changing the password from the account settings page may be an alternative to waiting for a reset email.
How to tell whether a Plex security email is genuine
Do not assume an email link is safe simply because it uses Plex branding. Open a fresh private browser window and type plex.tv or app.plex.tv manually. Use Plex’s normal sign-in, security or password-reset pages from there.
Plex says it will not email users asking for their password or credit-card number. Do not disclose a password or one-time code, and be especially cautious with shortened links, attachments, unusual domains or messages demanding immediate action.
Change reused passwords elsewhere
If your Plex password was reused on another site, change that password there immediately—starting with your email, banking, shopping, cloud-storage and social-media accounts. Use a different random password for every service and enable two-factor authentication wherever possible.
A password manager is optional, but it can generate and store a unique Plex password and help identify reused credentials. The important protection is uniqueness: a Plex reset does not protect other accounts that share the same password.
What remains unknown
- The number of affected users
- The identity of the unauthorized party
- The precise attack method
- Exactly what Plex included under “authentication data”
- Whether any particular reader’s account was actively taken over
The public notices also do not establish that plaintext passwords, payment-card numbers, Plex media files or entire user databases were stolen. The safest conclusion is narrower: Plex disclosed unauthorized access to a limited subset of account-related data and advised users to secure their accounts.
Quick Recap
Plex security-incident timeline
| Date | What Plex disclosed | Recommended action |
|---|---|---|
| August 22, 2022 | Limited data including email addresses, usernames and encrypted passwords was accessed. | Plex required all users to reset passwords. |
| September 8, 2025 | A limited subset including email addresses, usernames, securely hashed passwords and “authentication data” was accessed. | Password users should reset passwords and sign out connected devices; Google and Apple users should sign out of active sessions. |
| August 18, 2026 | The latest cited incident remains the September 2025 disclosure. | Use Plex’s official security and support pages rather than an unsolicited email link. |
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →
