The Pornhub data breach has been claimed by the ShinyHunters hacking group, who assert responsibility for breaching Pornhub, the world’s largest adult website. The attackers claim they accessed confidential data belonging to paid Premium subscribers and are threatening to publish it unless the company pays a ransom in Bitcoin, Reuters reports.
What Exactly Was Stolen?
The hackers did not just steal usernames and passwords. They obtained highly sensitive information, the publication of which could severely damage users’ reputations. As proof of the breach, the hackers have already posted dossiers on 14 subscribers online.
The leaked files contain user email addresses, geolocation (location), complete viewing history, search keywords, and video viewing dates.
Is This Real or a Bluff?
Unfortunately, the leak appears to be genuine. Reuters verified the data published by the hackers and found that three former Pornhub Premium subscribers confirmed that the information released about them was authentic. Data belonging to six other users matched information from previous known leaks.
Who Is At Risk?
Potentially, 200 million users are vulnerable—that is the estimated number of people who have paid for the $14.99 per month premium subscription.
Pornhub has begun sending notifications to affected individuals, however, the company is attempting to reduce panic by stating that the attackers only gained access to data belonging to “a limited set of users.” They did not specify which users were affected.
Who Is to Blame: Pornhub or Its Partners?
The most intriguing part of the story is determining responsibility. Both the company and its contractor are shifting the blame onto one another. Site representatives maintain that their systems were not directly breached. They claim that the hackers gained access to analytics data stored by a third-party partner—the company Mixpanel. The analytics service vehemently denies any breach of its systems. They told Reuters that there were no security vulnerabilities in November 2025. Furthermore, according to their records, access to the information occurred via a legitimate account belonging to an employee of Pornhub’s parent company, and this last happened back in 2023.
Protecting Yourself After the Pornhub Data Breach
The situation remains tense. The cybersecurity portal Bleeping Computer had previously warned about a potential vulnerability. Now that the hackers have resorted to blackmail, users of paid services should be particularly cautious about threat emails (phishing) and change their passwords. However, in this specific case, the main threat is the potential publication of viewing history, which changing a password will not conceal.
