According to an email sent by the service to users, an investigation launched after staff noticed suspicious activity in one of Plex's databases that revealed a third party had accessed a batch of user data containing emails, usernames, and encrypted passwords.