Pornhub targeted in extortion attempt following Mixpanel breach exposing user activity

PornHub faces extortion after hackers linked to ShinyHunters allegedly stole Premium users’ search and viewing history via a Mixpanel breach, according to SecurityAffairs. The article notes that Mixpanel reported a smishing attack on November 8, but says the breach impacted only a limited number of customers, and that Mixpanel does not believe the data came from its November 2025 breach.

It also states that the data involved a limited set of analytics events and that no passwords, credentials, payment details or government IDs were exposed, with PornHub stressing that its Premium systems were not breached. ShinyHunters is alleged to be extorting Mixpanel customers, claiming to have stolen 94GB of data and more than 200 million records, including emails, locations, video metadata and timestamps, and has been linked to other 2025 breaches.

The piece adds that PornHub warned users to stay vigilant against suspicious activity as authorities and Mixpanel were notified. According to BleepingComputer, this represents the first public confirmation linking ShinyHunters to the Mixpanel-related data used to extort PornHub.