The site and forum of the popular media server software Plex have been hacked. In an email send to all affected users, the company recommends to change passwords. The hacker has demanded a ransom and threatens that if his demands are not met he will make all Plex user data public.
The hacker that goes by the name 'savaka' demands 9.5 Bitcoin, about $2400. If that hasn't been paid by Friday the ransom will go up with 5 Bitcoin. The hacker claims to have stolen both data from customers as software from Plex. If Plex doesn't pay, he will distribute the data through torrents. So far the Bitcoin account of savaka appears to have received 18 Bitcoin (about $4500).
Plex has confirmed to its users that the hacker indeed has access to IP addresses, private messages and passwords of forum accounts. The passwords are hashed and salted, according to Plex. Users have to create a new password and only regain access to the forum if they create a new password. Payment data wasn't on the affected servers, according to Plex.
Plex is a media server to stream local content to many different kinds of devices.
