Plex

Plex discovered that a third-party was able to access a limited subset of their user data that includes emails, usernames, and encrypted passwords