Plex is implying the passwords were salted and hashed:

> all account passwords that could have been accessed were hashed and secured in accordance with best practices