Pornhub hit by massive security breach with 200 million users' data records

[DVTimes]

Pornhub hit by massive security breach with 200 million users' data records

Pornhub is notifying more than 200 million premium users that their data and search history on the adult website may have been stolen in a security breach.*

[DVTimes]

Link: https://mol.im/a/15390119

[DVTimes]

Pornhub Premium Hack: User Activity Data Leaked

A hack directed at the adult platform’s Premium service has led to extortion threats and new privacy fears, as a hacking gang claims it stole a huge lineage of customer activity logs. The company confirmed an incident involving a third-party analytics vendor and said that only some Premium users were impacted, adding that no passwords or payment information was exposed.

The dark web cybercrime group ShinyHunters told cybersecurity outlet BleepingComputer it was behind the breach and is trying to push the company with the alleged data dump. The group alleges that it is in possession of 201,211,943 records detailing historical search, watch and download data with respect to Premium accounts. Those reports identify the data fields as including a member’s email address, type of activity, geographic information and precise timestamps — for example: which video you watched, when you watched it and from where.


Link: https://www.findarticles.com/pornhub...y-data-leaked/

[NatalieK]

"Pornhub also advises users “to remain vigilant by monitoring their accounts for any suspicious emails or unusual activity.” Indeed. Reports suggest that data is now in the hands of the ShinyHunters cybercriminals. Keep an eye on your inbox."

https://www.forbes.com/sites/zakdoff...tivity-stolen/

fuck me

[nikki99]

Oh no....

[TheLegacy]

not as dramatic as Ashley Madison though

[CaptainHowdy]

I'm on the fence on this one . . .

[NALEM]

Waiting for a Class Action for the Breach, to be negotiated, settled and approved by the Judge in about three years. Each member of the Class will receive their choice of a F^$#ing $1 or a Free 7 day Membership with valid credit card on file.

[mechanicvirus]

https://www.reddit.com/r/technology/...steal_premium/

Hahaha I fucking LOVE reading reddit comments about pornhub:

"Premium member activity

Phew, I'm safe then."

user jovial_rebel going with the sarcastic comment about people paying for porn, same type of porn this user probably views for free after 50+ people had a hand in creating it.

"Good thing the US citizens don't have to upload their IDs to them, right?"

Oh man here's a good one from user Odysseyan going with that ole sarcasm draped comment because they are most likely too scared to fight back in terms of AVS.

"people pay for that shit?"

Oh dang here's a real hard hitting quote from user KyonSuzumiya insinuating porn companies don't make money, hey I wonder what their yearly salary is?

I love reddit, especially on topics of pornhub.

[fuzebox]

Except it was industry standard analytics platform Mixpanel worth $1+ billion that was hacked, which Pornhub used for analytics before 2021.

I guess since Uber, Expedia, Yelp, or Docusign users can't be so easily extorted that didn't make the news.

[NatalieK]

Originally Posted by fuzebox

Except it was industry standard analytics platform Mixpanel worth $1+ billion that was hacked, which Pornhub used for analytics before 2021.

I guess since Uber, Expedia, Yelp, or Docusign users can't be so easily extorted that didn't make the news.

Pornhub are suggesting it was through Mixpanel...

https://www.reuters.com/world/americ...ub-2025-12-16/

"Mixpanel, which offers its clients detailed visibility into user data and activities, disclosed, opens new tab a cybersecurity incident on November 27.
The company said in a statement provided to Reuters on Tuesday that it was aware of Pornhub’s statement, but that it “can find no indication that this data was stolen from our November 2025 security incident or otherwise.”
Pornhub’s data with Mixpanel was last accessed by “a legitimate employee account at Pornhub’s parent company in 2023,” according to the statement. “If this data is in the hands of an unauthorized party, we do not believe that is the result of a security incident at Mixpanel.”
ShinyHunters told Reuters the data was connected to the recent Mixpanel incident. Mixpanel denied ShinyHunters' claim, saying the company had done a thorough investigation into the November incident with external cybersecurity experts and notified all affected clients."

but Mixpanel are saying it wasn´t their breach & it was an unauthorized party...

yet ShinyHunters claim it was through mixpanel, No matter, shinyhunters say...

“We’re demanding a ransom payment in Bitcoin to prevent the publication of [Pornhub] data and delete the data,” ShinyHunters told Reuters in an online chat."

Wonder if PH is going to pay ransom. the US & UK gov, never pay for ransom




more info here.. : https://www.theguardian.com/technolo...search-history

[INever]

The adult content site added that this was not a breach of its own system, ensuring users that their passwords, credentials or government IDs were not compromised or exposed.

[CyberHustler]

[money biz]

I think these breaches are just another way of saying we sold your data.

[Huggles]

Originally Posted by money biz

I think these breaches are just another way of saying we sold your data.

Pornhub are upstanding people... they would never!