In late 2025, the notorious cybercrime collective ShinyHunters — previously responsible for breaches at Ticketmaster, Microsoft, and AT&T — exploited a vulnerability in Mixpanel, a third-party analytics vendor, to exfiltrate a 94-gigabyte database containing over 200 million Pornhub Premium user records. The breach was discovered on December 18, 2025, and publicly disclosed shortly after.

Why It Matters

This breach crystallizes the privacy paradox at the heart of the adult content industry: platforms collect vast amounts of intimate behavioral data while operating in a regulatory environment where data security standards are poorly enforced. The lawsuits could establish significant precedent for how sexual behavioral data is treated under privacy law, and the breach will intensify calls for data minimization across all adult platforms.

The exposed data includes email addresses, geolocation data, search queries, watch history, and viewing timestamps. Critically, while passwords and financial data were not compromised, the behavioral nature of the breach makes it uniquely dangerous — linking real identities to extremely sensitive sexual preferences and viewing patterns. ShinyHunters has demanded cryptocurrency ransom, threatening to release the database on the dark web or sell it to other threat actors.

Aylo, Pornhub's parent company, attributed the breach to Mixpanel, claiming it stopped using the vendor in 2021. Mixpanel countered that the data was accessed using legitimate Pornhub employee credentials from 2023, suggesting compromised credentials within Aylo's corporate structure (now owned by Ethical Capital Partners).

Three separate federal class-action lawsuits were filed in the U.S. District Court for the Western District of Texas. Plaintiffs — listed as Jane and John Does from California, Mississippi, and Nevada — allege invasion of privacy, negligence, breach of implied contract, unjust enrichment, and violations of consumer protection laws. Court filings note: "An individual's sexual desires constitute some of the most sensitive and personal information there is. Despite its prevalence, pornography consumption remains deeply private — making this breach uniquely damaging."

Pornhub has warned users to expect sextortion emails from criminals exploiting the stolen data.

Sources

Update — 2026-03-14

Initial entry — story first created.