Adult video platform PornHub is being extorted by the ShinyHunters threat group after the search and watch history of Premium users was allegedly stolen in a recent data breach at analytics provider Mixpanel.
PornHub confirmed last week that it was affected by the Mixpanel breach, which occurred on November 8, 2025, after attackers compromised Mixpanel systems through an SMS phishing (smishing) attack. In a security notice, PornHub said the incident affected only a limited number of Premium users and did not involve PornHub’s own systems.
The company emphasized that passwords, payment details, and financial information were not exposed. PornHub also noted that it stopped working with Mixpanel in 2021, meaning the stolen data is historical analytics information from 2021 or earlier.
According to BleepingComputer, ShinyHunters has begun extorting Mixpanel customers, sending emails demanding payment to prevent the release of stolen data. In its demand to PornHub, the group claims it exfiltrated 94GB of data containing more than 200 million records.
ShinyHunters later confirmed responsibility for the attack, alleging the data includes 201,211,943 records tied to PornHub Premium users. A sample reviewed by BleepingComputer reportedly contains highly sensitive analytics data, including email addresses, video titles, URLs, keywords, locations, timestamps, and whether a user watched, downloaded, or searched for content.
While PornHub has not commented beyond its initial notice, Mixpanel said the breach affected a limited number of customers. OpenAI and CoinTracker have previously disclosed that they were impacted.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
