Plex 更新：关于潜在安全事件的通知
10 分•作者: white_viel•9 个月前
尊敬的Plex用户：
我们最近遭遇了一起安全事件，可能涉及您的Plex账户信息。我们认为此次事件的实际影响有限；但是，为了确保您的账户安全，您需要采取行动。
发生了什么
未经授权的第三方访问了我们数据库中一小部分客户数据。虽然我们迅速控制了事件，但被访问的信息包括电子邮件、用户名和安全哈希密码。
任何可能被访问的账户密码都经过安全哈希处理，符合最佳实践，这意味着第三方无法读取它们。为了安全起见，我们建议您立即访问https://plex.tv/reset重置您的密码。请放心，我们不会在服务器上存储信用卡数据，因此此信息在此次事件中未受到损害。
我们在做什么
我们已经解决了第三方用来访问系统的方法，并且正在进行额外的审查，以确保我们所有系统的安全性得到进一步加强，以防止未来的攻击。
您必须做什么
我们恳请您立即访问https://plex.tv/reset重置您的Plex账户密码。在执行此操作时，有一个复选框“在更改密码后注销已连接的设备”，我们建议您启用它。这将使您从所有设备（包括您拥有的任何Plex Media Server）上注销，以确保您的安全，然后您需要使用新密码重新登录。我们理解这会给您带来一些额外的工作，但它将为您的账户提供额外的安全保障。
您可以采取的其他安全措施
我们提醒您，Plex的任何人都不会通过电子邮件联系您，要求您提供密码或用于付款的信用卡号。为了进一步保护您的账户，我们还建议您在Plex账户上启用两因素身份验证（如果尚未启用）。
最后，对于此次事件可能给您带来的任何不便，我们深表歉意。我们为我们的安全系统感到自豪，这有助于我们迅速检测到此事件，并且我们想向您保证，我们正在迅速努力，以防止未来可能发生的事件。
有关如何重置密码的逐步说明，请访问：https://support.plex.tv/articles/account-requires-password-reset
谢谢，
Plex团队
查看原文
Dear Plex User,
We have recently experienced a security incident that may potentially involve your Plex account information. We believe the actual impact of this incident is limited; however, action is required from you to ensure your account remains secure.<p>What happened
An unauthorized third party accessed a limited subset of customer data from one of our databases. While we quickly contained the incident, information that was accessed included emails, usernames, and securely hashed passwords.<p>Any account passwords that may have been accessed were securely hashed, in accordance with best practices, meaning they cannot be read by a third party. Out of an abundance of caution, we recommend you immediately reset your password by visiting https://plex.tv/reset. Rest assured that we do not store credit card data on our servers, so this information was not compromised in this incident.<p>What we're doing
We've already addressed the method that this third party used to gain access to the system, and we're undergoing additional reviews to ensure that the security of all of our systems is further hardened to prevent future attacks.<p>What you must do
We kindly request that you reset your Plex account password immediately by visiting https://plex.tv/reset. When doing so, there's a checkbox to "Sign out connected devices after password change," which we recommend you enable. This will sign you out of all your devices (including any Plex Media Server you own) for your security, and you will then need to sign back in with your new password. We understand that this means a little more work for you, but it will provide additional security to your account.<p>Additional Security Measures You Can Take
We remind you that no one at Plex will ever reach out to you over email to ask for a password or credit card number for payments. For further account protection, we also recommend enabling two-factor authentication on your Plex account if you haven’t already done so.<p>Lastly, we sincerely apologize for any inconvenience this situation may cause you. We take pride in our security systems, which helped us quickly detect this incident, and we want to assure you that we are working swiftly to prevent potential future incidents from occurring.<p>For step-by-step instructions on how to reset your password, visit: https://support.plex.tv/articles/account-requires-password-reset<p>Thank you,
The Plex Team