--- title: 86% of Superyacht AV Systems Hacked description: 86% of superyacht AV systems are vulnerable to hacking. Find out why, what’s at risk, and what steps you can take to protect your superyacht. image: https://trustanchorpoint.com/hubfs/AI-Generated%20Media/Images/showcase%20an%20avmedia%20library%20view%20from%20behind%20one%20person%20sitting%20in%20a%20private%20cinema%20room%20watching%20a%20film%20the%20chairs%20in%20the%20room%20should%20be%20individual%20armchairs%20like%20high%20end%20cinema%20rooms.png --- [Skip to content](https://trustanchorpoint.com/insights/86-percent-superyacht-av-systems-hacked#main-content) [![Anchorpoint logo black](https://trustanchorpoint.com/hs-fs/hubfs/Black-White.png?width=1100&height=300&name=Black-White.png)Homepage](https://trustanchorpoint.com) - [What's a virtual CISO?](https://trustanchorpoint.com/whats-a-virtual-ciso) - Superyacht Cybersecurity - [Hire a virtual Cybersecurity Officer (vCySO)](https://trustanchorpoint.com/cybersecurity-compliance-for-superyachts) - [Cybersecurity Compliance for Superyachts](https://trustanchorpoint.com/cybersecurity-compliance-for-superyachts) - [Cybersecurity Awareness Training for Superyacht Crew](https://trustanchorpoint.com/cybersecurity-awareness-training-for-superyacht-crew) - [Cybersecurity Threat Intelligence for Superyacht Crew](https://trustanchorpoint.com/cybersecurity-threat-intelligence-for-superyacht-crew) - [Insights](https://trustanchorpoint.com/insights) - [About](https://trustanchorpoint.com/about-us) - [Code of Ethics](https://trustanchorpoint.com/code-of-ethics) [Contact us](https://trustanchorpoint.com/contact) - [What's a virtual CISO?](https://trustanchorpoint.com/whats-a-virtual-ciso) - Superyacht Cybersecurity - [Hire a virtual Cybersecurity Officer (vCySO)](https://trustanchorpoint.com/cybersecurity-compliance-for-superyachts) - [Cybersecurity Compliance for Superyachts](https://trustanchorpoint.com/cybersecurity-compliance-for-superyachts) - [Cybersecurity Awareness Training for Superyacht Crew](https://trustanchorpoint.com/cybersecurity-awareness-training-for-superyacht-crew) - [Cybersecurity Threat Intelligence for Superyacht Crew](https://trustanchorpoint.com/cybersecurity-threat-intelligence-for-superyacht-crew) - [Insights](https://trustanchorpoint.com/insights) - [About](https://trustanchorpoint.com/about-us) - [Code of Ethics](https://trustanchorpoint.com/code-of-ethics) [Contact us](https://trustanchorpoint.com/contact) ![person watching a film in a private cinema room](https://trustanchorpoint.com/hs-fs/hubfs/AI-Generated%20Media/Images/showcase%20an%20avmedia%20library%20view%20from%20behind%20one%20person%20sitting%20in%20a%20private%20cinema%20room%20watching%20a%20film%20the%20chairs%20in%20the%20room%20should%20be%20individual%20armchairs%20like%20high%20end%20cinema%20rooms.png?width=1536&height=1024&name=showcase%20an%20avmedia%20library%20view%20from%20behind%20one%20person%20sitting%20in%20a%20private%20cinema%20room%20watching%20a%20film%20the%20chairs%20in%20the%20room%20should%20be%20individual%20armchairs%20like%20high%20end%20cinema%20rooms.png) Cyber security Cybersecurity VPN # 86% of Superyacht AV Systems Hacked ![Matt](https://app.hubspot.com/settings/avatar/618f3d942fdcc567e50ece243104b38b) Matt September 23, 2025   If you work on a superyacht, there's an 86% chance your AV system has just been hacked. That was the result of a poll within a messaging group with over 200 members, comprising ETOs and AVITs from the superyacht industry. The tool I'm talking about is [Plex](If%20you%20work%20on%20a%20superyacht,%20there's%20an%2086%%20chance%20your%20AV%20system%20has%20just%20been%20hacked.%20That%20was%20the%20result%20of%20this%20poll.%20The%20tool%20I'm%20talking%20about%20is%20Plex.%20Plex%20is%20an%20online%20media%20server%20that%20superyachts%20use%20for%20movies,%20TV%20shows,%20and%20other%20content.%20Plex%20confirms%20an%20unauthorized%20third%20party%20has%20accessed%20email%20addresses,%20usernames,%20and%20passwords.%20Yep,%20passwords.%20The%20passwords%20were%20securely%20hashed,%20which%20means%20they're%20encrypted,%20not%20easily%20read.%20However,%20they%20could%20be%20cracked,%20if%20perhaps%20they%20had%20access%20to%20AI.%20Huh.%20The%20good%20news,%20no%20credit%20card%20information%20was%20leaked.%20But%20that's%20not%20the%20point.%20For%20the%20admins%20of%20your%20Plex%20system%20or%20any%20other%20super%20users%20that%20have%20access%20to%20the%20NAS%20or%20the%20media%20server,%20this%20opens%20a%20door%20to%20much%20more%20than%20just%20movies.%20It%20could%20expose%20IPs,%20device%20information,%20web%20history,%20and%20worse,%20probably%20the%20same%20password%20elsewhere.%20It's%20not%20like%20I've%20recently%20been%20told%20that%20a%20captain%20lost%20owner%20funds%20because%20their%20email%20account%20and%20bank%20account%20shared%20the%20same%20password.%20If%20you%20use%20Plex,%20these%20are%20the%20things%20you%20must%20do%20now.%20One,%20change%20your%20password.%20Two,%20enable%20or%20re-enable%20MFA.%20Three,%20sign%20out%20of%20all%20other%20devices.%20That's%20easier%20to%20do%20on%20desktop,%20and%20I'll%20link%20a%20video,%20uh,%20that's%20very%20helpful,%20to%20show%20you%20how%20to%20do%20all%20these%20things%20with%20Plex%20in%20the%20comments.%20Four,%20and%20lastly,%20check%20all%20of%20Plex's%20permission.%20It%20may%20have%20read%20and%20write%20permissions,%20which%20is%20a%20risk,%20depending%20on%20what%20that%20system%20has%20access%20to%20on%20that%20device.%20It's%20recommended%20to%20change%20to%20read%20only.%20You%20don't%20need%20to%20panic,%20but%20you%20do%20need%20to%20act.%20Go%20and%20check%20out%20the%20how-to%20in%20the%20comments.%20Follow%20Anchorpoint%20for%20more%20cybersecurity%20news%20and%20how-tos%20to%20keep%20you%20cyber%20safe.). Plex is an online media server that superyachts use for movies, TV shows, and other content. Plex confirms an unauthorised third party has accessed email addresses, usernames, and passwords. The passwords were securely hashed, which means they're encrypted and not easily readable. However, they could be cracked if bad actors had access to AI. The good news is that no credit card information was leaked. But that's not the point. For the admins of your Plex system or any other super users with access to the NAS or media server, this opens a door to much more than just movies. It could expose IPs, device information, web history, and, worse, probably the same password elsewhere. It's not like I've recently been told that a captain lost owner funds because their email account and bank account shared the same password. If you use Plex, here are the steps you need to take now. 1. Change your password. 2. , enable or re-enable MFA. 3. Sign out of all other devices. That's easier to do on a desktop. [Here's a link to a video that's very helpful](https://www.youtube.com/watch?v=KyLYLoDDqVY), to show you how to do all these things with Plex. 4. Lastly, check all of Plex's permissions. It may have read and write permissions, which is a risk, depending on what that system has access to on that device. It's recommended to change to read-only. 5. You don't need to panic, but you do need to act. Go and check out the how-to in the comments. Follow Anchorpoint for more cybersecurity news and how-tos to keep you cyber safe. ## Share this post [mailto:https%3A%2F%2Ftrustanchorpoint.com%2Finsights%2F86-percent-superyacht-av-systems-hacked](mailto:https%3A%2F%2Ftrustanchorpoint.com%2Finsights%2F86-percent-superyacht-av-systems-hacked) ## Keep reading ### [![inspection of superyacht cybersecurity](https://trustanchorpoint.com/hs-fs/hubfs/AI-Generated%20Media/Images/anime%20A%20new%20build%20yacht%20being%20inspected%20for%20cybersecurity%20controls%20in%20the%20rack%20space%20with%20just%20one%20person%20with%20two%20arms%20looking%20closely%20at%20the%20configu.png?width=1536&height=1024&name=anime%20A%20new%20build%20yacht%20being%20inspected%20for%20cybersecurity%20controls%20in%20the%20rack%20space%20with%20just%20one%20person%20with%20two%20arms%20looking%20closely%20at%20the%20configu.png) Cybersecurity superyacht new build IACS UR E26 & E27: Cybersecurity Regulations for Superyachts](https://trustanchorpoint.com/insights/iacs-ur-e26-e27-cybersecurity-regulations-for-superyachts) ### [![](https://trustanchorpoint.com/hs-fs/hubfs/Newsletter%20Header_large_nologo.png?width=1920&height=1080&name=Newsletter%20Header_large_nologo.png) Cybersecurity Yachting superyacht If Password Managers Aren’t Perfect, Are They Still Worth It?](https://trustanchorpoint.com/insights/if-password-managers-arent-perfect-are-they-still-worth-it) [![L-White-White-Tran](https://trustanchorpoint.com/hs-fs/hubfs/L-White-White-Tran.png?width=200&height=56&name=L-White-White-Tran.png "L-White-White-Tran")](https://www.trustanchorpoint.com) - [Privacy Policy](https://trustanchorpoint.com/hubfs/Privacy%20Policy.pdf) - [Terms & Conditions](https://trustanchorpoint.com/hubfs/Terms%20and%20Conditions.pdf) - [Contact Us](https://trustanchorpoint.com/contact) - [Climate Pledge](https://climate.stripe.com/hLNMmV) © 2026 Anchorpoint (trading name of Anchorpoint Cyber Limited). Company number 16320713, registered in England. All rights reserved. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Matt", "url" : "https://trustanchorpoint.com/insights/author/matt" }, "dateModified" : "2025-09-23T09:26:01.595Z", "datePublished" : "2025-09-23T09:21:08.000Z", "headline" : "86% of Superyacht AV Systems Hacked", "image" : [ "https://trustanchorpoint.com/hubfs/AI-Generated%20Media/Images/showcase%20an%20avmedia%20library%20view%20from%20behind%20one%20person%20sitting%20in%20a%20private%20cinema%20room%20watching%20a%20film%20the%20chairs%20in%20the%20room%20should%20be%20individual%20armchairs%20like%20high%20end%20cinema%20rooms.png" ], "mainEntityOfPage" : { "@id" : "https://trustanchorpoint.com/insights/86-percent-superyacht-av-systems-hacked", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://trustanchorpoint.com/hubfs/Black-White.png" }, "name" : "Anchorpoint Cyber Limited" } } ```