Leak at PornHub

On 16 December 2025, Pornhub — one of the world's largest adult-content platforms, operated by Aylo (formerly MindGeek) — confirmed that historical user analytics data had been stolen and was being used in an extortion attempt. The company stressed that "this was not a breach of Pornhub Premium's systems": the data was taken from Mixpanel, a third-party analytics provider Pornhub stopped using in 2021, meaning the exposed records are several years old.

The extortion group ShinyHunters claimed responsibility, advertising roughly 94 GB of data and a figure of around 200 million Premium-user records (a specific claim of 201,211,943), and demanded a cryptocurrency ransom under threat of public release. Mixpanel has disputed the scale of the claim, and the exact number affected remains unverified.

Exposed data categories reported include:

• Email addresses
• Search and viewing history (keywords, video names/URLs)
• Activity type (watched, downloaded, viewed a channel) with timestamps
• Approximate location data

Pornhub stated that passwords, payment details and other financial information were not affected. The company opened an internal investigation, engaged Mixpanel and the relevant authorities, and advised affected Premium users to enable multi-factor authentication and watch for suspicious activity. As of disclosure, the incident remained under active investigation.