If you subscribe to Pornhub Premium, you might be dealing with more than just the shock of seeing that charge on your credit card statement. According to a report from Bleeping Computer, a well-known hacking group has taken the data of Pornhub’s paying members hostage in an attempt at extortion.
This all started back in November when the group, known as ShinyHunters, executed an SMS phishing attack that led them to breach Mixpanel, a third-party analytics vendor used by Pornhub. With this access, they snatched a treasure trove of records linked to various companies, including household names like OpenAI. Now, they’re trying to coerce Pornhub into a payment to make the problem disappear—something they’ve successfully done with others, like AT&T.
Pornhub has acknowledged that some data from Premium users has been compromised. In a security notice sent to its users, the company stated:
“A recent cybersecurity incident involving data from a third-party data analytics service provider has impacted some Pornhub Premium users. Specifically, this situation affects only select Premium users. It is important to note this was not a breach of Pornhub Premium’s systems. Passwords, payment details, and financial information remain secure and were not exposed.”
While it’s reassuring that credit card info and passwords seem safe, the betrayal feels a lot deeper. ShinyHunters claims to possess around 94GB of data from Pornhub users, comprising approximately 201 million records. Even if payment details aren’t included, these records reveal a lot, including search history, watch history, and download activity, along with email addresses that connect this behavior to identifiable individuals. So, it’s a tough sell for Pornhub to downplay this breach as unimportant.
Interestingly, Pornhub mentioned that they haven’t collaborated with Mixpanel since 2021. This indicates that the stolen records likely date back a bit, but that’s little solace for those impacted—nobody wants their private activity exposed.
This incident serves as a stark reminder of the growing need for companies to handle sensitive data responsibly. As states and countries ramp up efforts to limit underage access to adult content online, users are increasingly relying on Pornhub and its partners to safeguard their private information.
What happened with Pornhub’s user data?
Pornhub’s Premium user data was compromised following a hack into Mixpanel, a third-party analytics vendor, leading to an extortion attempt by ShinyHunters, a hacking group.
Was my credit card information exposed in the breach?
No, Pornhub confirmed that payment details, passwords, and financial information remain secure and were not compromised in the breach.
What kind of data was stolen from Pornhub users?
The stolen data includes users’ search and watch histories, download activity, and email addresses—all of which could link their activity to identifiable personal information.
How many users were affected by this breach?
Though Pornhub did not specify the exact number, ShinyHunters claimed to have approximately 201 million records of Pornhub users, indicating a significant breach.
What steps is Pornhub taking in response to the breach?
Pornhub is informing affected users about the situation and reinforcing their security measures. They have confirmed that this breach did not affect their systems directly.
This startling breach highlights the pressing need for vigilance when it comes to sharing any personal data online. With the stakes much higher, we have to wonder—if you can’t trust a porn site with your credit card, who can you trust? Drop your thoughts in the comments below.