Hacker Holding PLEX Forum Hostage

[RichCor]

Media Server Company Plex has been hacked and that Forum Servers are affected, according to posts reported on Reddit and PC Magazine.

Plex Forums Breached, Hacker Holding Data for Ransom

PCMAG | By Chloe Albanesius | July 3, 2015 10:15AM EST

The hacker made off with IP addresses, forum private messages, email addresses, and encrypted passwords.

[a] Reddit post, meanwhile, said that the hacker is essentially holding the stolen content for ransom.

The attacker has demanded 9.5 bitcoin (about, $2,400) by July 3, a number that will go up by 5 bitcoin ($1,270) today if no payment is made.

"Eventually if no BTC payment is made, the data will be released via multiple torrent networks and there will be no more plex.tv," the hacker wrote on the Plex forums.

Can Forum posts and data really be worth $2,400? Hmmm... Hmmm...

Status.Plex.TV

Investigating - Our forum machine has apparently been compromised. We’ve brought it down so we can investigate. We have no reason to believe that any other parts of our infrastructure was compromised, but we're still investigating. We’ll update when we know more.
Jul 1, 15:00 PDT

We're continuing our investigation.
Jul 1, 22:56 PDT

Update - We became aware this afternoon that the server which hosts our forums and blog was compromised. We are still investigating, but as far as we know, the attacker only gained access to these parts of our systems. Rest assured that credit card and other payment data are not stored on our servers at all.

Users who have a forum account which is linked to a plex.tv account have had their passwords reset and emails have been sent out. The attacker was able to gain access to IP addresses, private messages, email addresses, and encrypted forum passwords (in technical terms, they are hashed and salted). Despite the password encryption measures, we take your privacy and security very seriously, so as a precaution, we issued the password reset. When creating the new password, be sure to choose a strong password, never share it, and never re-use passwords for different accounts! Even better, use a password manager (1Password, for example) to manage a unique password for you.

Edited July 3, 2015 by RichCor

[Chicog]

Nasty little scumbag, I hope someone finds him.