Plex says the stolen data includes email addresses, usernames, securely hashed passwords, and authentication data. “An unauthorized third party accessed a limited subset of customer data from one of our databases,” reads the Plex data breach notification.