Malwarebytes
SoundCloud, Pornhub, and 700Credit all reported data breaches, but the similarities end there
The Malwarebytes piece compares SoundCloud, Pornhub and 700Credit breaches, stressing how each incident differed in impact and method. 700Credit disclosed a late October 2025 third‑party supply‑chain attack that exposed names, addresses, dates of birth and SSNs for roughly 5.6 million people after an attacker compromised a partner’s API.
SoundCloud said unauthorized activity in an ancillary service dashboard led to a disruption of service but no access to sensitive data, with about 20% of its user base affected and only email addresses and public profile information exposed.
Pornhub reported that on 8 November 2025 a breach at the analytics provider Mixpanel exposed a limited set of analytics events for certain users, while Pornhub stressed passwords, payment details and financial information were not exposed; Mixpanel disputes that the data originated from its November incident.
The piece notes that ShinyHunters claims to have obtained about 94 GB of data tied to Pornhub Premium activity, including more than 200 million analytics records, though the group’s extortion communications and samples were described as disputed.
In total, the article emphasises that the breaches differ not only in origin but in the risk they pose to victims, with 700Credit offering monitoring and notifying regulators, while SoundCloud and Pornhub present more ambiguous implications for privacy and potential misuse of data.