94GB Breach: Hackers Threaten Adult Website Users

Warning sign System Hacked on laptop screen.

A massive data breach threatens the privacy of Pornhub’s Premium users, igniting fears of public exposure and reputational damage.

Story Snapshot

Hackers linked to ShinyHunters claim to have stolen 94 GB of sensitive data.
Pornhub’s systems remain secure; the breach stems from third-party analytics.
Mixpanel, the analytics provider, disputes involvement in the breach.
Extortion involves threats to publish sensitive viewing data if demands aren’t met.

Details of the Data Breach

In a significant cybersecurity incident, hackers associated with the ShinyHunters collective have allegedly obtained 94 GB of analytics data from Pornhub Premium users. This data includes over 200 million records that link email addresses to detailed viewing and search histories. The threat actors are using this data to extort Pornhub, demanding a ransom to prevent the public release of the sensitive information.

Pornhub’s parent company, Aylo, has confirmed a cybersecurity incident but emphasized that their core systems were not breached. The breach is attributed to a third-party analytics provider, Mixpanel, which had historical data from 2021 or earlier. Aylo assures users that passwords and payment information were not compromised.

The Role of Mixpanel

Mixpanel, the third-party analytics provider, suffered a breach on November 8, 2025, following a phishing attack. While Mixpanel has confirmed this incident, they deny that the Pornhub data was stolen during their breach. According to Mixpanel, the dataset in question was last accessed by a legitimate Aylo employee account in 2023, suggesting a potential lapse on the customer’s side.

Despite Mixpanel’s denials, the hackers claim their extortion campaign against Pornhub is linked to the Mixpanel breach. This has created a complex situation where the responsibility for the data leak is contested.

Implications for Privacy and Security

The breach exposes Pornhub Premium users to significant privacy risks. The data collected includes users’ email addresses, locations, and detailed porn consumption habits. Such information can lead to personal identification and potential social and reputational harm. Users face the risk of blackmail, doxxing, and other forms of harassment.

The extortion attempts underscore the broader vulnerabilities within supply chain security, where third-party services become weak links. This incident highlights the need for rigorous data protection measures, especially for platforms handling sensitive information.