PornHub Premium members data exposed after Mixpanel analytics breach
Take action: One more perfect example of why you should delete data of your former customers. It's a lot less trouble down the line. Also, why in the world would someone have an account with a porn site? If it happens on the internet it stays on the internet!
Learn More
Adult video platform PornHub reports a data breach affecting its Premium members after a security incident at third-party analytics provider Mixpanel.
The breach occurred when the ShinyHunters extortion gang breached Mixpanel's systems through an SMS phishing (smishing) attack. PornHub claims that this was not a direct breach of their systems and that Mixpanel is a former vendor which they discontinued in 2021.
The breach exposed highly sensitive historical analytics data spanning PornHub Premium members' platform activity from 2021 or earlier. ShinyHunters claims to have stolen 94 gigabytes of data containing 201,211,943 records of personal information and user behavior.
The threat actors launched an extortion campaign, sending demands to PornHub and other affected Mixpanel customers, warning that the stolen data would be published if ransoms were not paid.
The compromised data includes:
- Email addresses linked to Premium accounts
- Activity types (video views, downloads, channel visits)
- Geographic location data
- Video URLs and titles
- Search queries and keywords associated with viewed content
- Detailed timestamps of all recorded events
The number of affected individuals is not disclosed. It's not clear why Mixpanel would keep data from PornHub if they were not a vendor for over 3 years.
Update: A Mixpanel spokesperson told Newsweek: "The data was last accessed by a legitimate employee account at Pornhub’s parent company in 2023. If this data is in the hands of an unauthorized party, we do not believe that is the result of a security incident at Mixpanel."
As of 22nd of December 2025, Pornhub updated its online statement to warn users about potential sextortion:
“We are aware that the individuals responsible for this incident have threatened to contact impacted Pornhub Premium users directly. You may receive emails claiming they have your personal information. As a reminder, we will never ask for your password or payment information by email.”
