Pornhub, the world’s largest adult entertainment platform, has allegedly been compromised in a supply chain attack linked to analytics vendor Mixpanel. The ShinyHunters extortion group claims to have breached the platform’s user data and is currently extorting the company. While Pornhub released a security notice confirming that a “cybersecurity incident involving Mixpanel” impacted select Premium users, they emphasized that their own internal systems were not breached. Conversely, Mixpanel has disputed the source of the data, stating they found no indication that the specific records in question were stolen during their own recent security incident.
According to the ShinyHunters group, the compromised dataset contains approximately 94GB of data representing over 200 million records. The allegedly compromised data includes:
-
Full email addresses
-
Search history keywords
-
Watch history (video names and URLs)
-
Download activity logs
-
Location data
-
Timestamps of user activity
