Hacked Analytics Firm Exposed 201 Million Records

Cybercriminals are holding millions of Americans’ most intimate viewing habits hostage, exposing the dangerous reality of how personal data can be weaponized against everyday citizens seeking privacy. The ShinyHunters hacking collective has stolen over 201 million records of Pornhub Premium users, including email addresses, geographic locations, and detailed viewing histories, via a breach at third-party analytics provider Mixpanel. Now, the hackers are extorting the company with threats to publicly expose this sensitive information, leaving millions vulnerable to blackmail, harassment, and career destruction. The incident highlights the dangerous privacy risks created by corporate data sharing and the escalating pattern of cybercriminals leveraging personal embarrassment for financial gain.

Story Overview

ShinyHunters hacking group stole 201 million records linking Pornhub Premium users’ emails to explicit viewing and search histories
Hackers are extorting Pornhub with threats to publicly expose users’ most private browsing activities and personal locations
A data breach occurred through the third-party analytics provider Mixpanel, highlighting dangerous privacy risks from corporate data sharing
Affected users face potential blackmail, harassment, and career destruction if their intimate viewing preferences become public

Massive Data Theft Threatens Personal Privacy

The ShinyHunters cybercriminal collective has stolen approximately 94 gigabytes of Pornhub Premium user data containing over 201 million records. This stolen information includes users’ email addresses, geographic locations, detailed viewing histories, search terms, and timestamps of activity. The hackers reviewed samples showing specific video URLs, associated keywords, and precise user behaviors, including downloads and channel views. This represents one of the most sensitive personal data breaches in recent memory.

BleepingComputer journalists confirmed the authenticity of sample data showing how users’ identities are directly linked to their most private viewing preferences. The records span historical analytics data from when Pornhub used Mixpanel services prior to 2021. ShinyHunters has sent extortion emails threatening to publish this information unless ransom demands are met, creating an unprecedented privacy crisis for millions of Americans.

🚨 Cyber Alert – PornHub

PornHub has been extorted by the ShinyHunters extortion gang following the alleged theft of search and watch history belonging to its Premium members in a recent Mixpanel data breach.

Source: https://t.co/s1aB4eEuJc pic.twitter.com/T9WwPz2sEx

— Hackmanac (@H4ckmanac) December 16, 2025

Corporate Finger-Pointing Obscures Accountability

Pornhub’s parent company Aylo, claims the breach resulted from a “cybersecurity incident” at third-party analytics provider Mixpanel, not their own systems. They insist passwords and financial information remain secure while downplaying the severity by calling affected users merely “select Premium users.” However, Mixpanel disputes this narrative, stating they found no evidence the Pornhub data was stolen during their November 2025 breach.

Mixpanel points to legitimate access by an Aylo employee account in 2023, suggesting the compromise may have occurred on Pornhub’s side rather than through Mixpanel’s infrastructure. This corporate blame game leaves millions of users without clear answers about how their most sensitive personal information was compromised. The dispute highlights how data sharing between companies creates dangerous vulnerabilities that ordinary Americans cannot control or even understand.

Hackers breached Pornhub and threatened to expose users' viewing habits: Pornhub hackers are demanding the company pay an undisclosed amount or it will release detailed information about its users https://t.co/zNRnBnn0VJ pic.twitter.com/VRuuvhLHjk

— Quartz (@qz) December 17, 2025

Pattern of Escalating Cyber Extortion

ShinyHunters has systematically targeted major technology vendors throughout 2025, including Salesforce integrations and analytics providers like Mixpanel. Their strategy involves breaching third-party services to access customer data from multiple organizations simultaneously. Previous victims of the Mixpanel breach include OpenAI, CoinTracker, and SoundCloud, with the latter reporting 20 percent of users affected.

This incident demonstrates how cybercriminals are evolving beyond traditional financial theft toward leveraging embarrassing personal information for extortion. The hackers understand that exposure of intimate viewing habits carries devastating social and professional consequences, making victims more likely to pay ransoms. As corporations continue sharing sensitive user data with numerous third-party vendors, Americans face increasing vulnerability to these sophisticated supply-chain attacks targeting their most private digital activities.

Watch the report: Pornhub Data Breach: Massive Pornhub Hack Leaks Premium User Emails, Locations | WION