ShinyHunters allegedly hacks Pornhub, demands Bitcoin ransom for 2025

Pornhub is dealing with new problems after hacking group ShinyHunters claimed responsibility for a massive user data leak. The group says it stole 94GB of data tied to more than 200 million records and is now trying to blackmail the company for a Bitcoin ransom.

According to BleepingComputer, hackers say they will publish the data if their demands are not met. Pornhub acknowledged the situation but claims its core systems were not breached.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent safety alerts and special deals straight to your inbox. You’ll also get instant access to my Ultimate Scam Survival Guide – free when you join my channel CYBERGUY.COM newsletter

400 THOUSAND BANK CUSTOMERS’ INFORMATION IS DISCLOSED DUE TO DATA BREACH

Data ShinyHunters claims to have stolen

ShinyHunters says the exposed data was focused on Pornhub Premium users. Although no financial information is included, the dataset still contains highly sensitive activity details.

The group claims the stolen recordings included:

• Email addresses
• Event type
• Location
• Video URLs and video names
• Keywords linked to videos
• Timestamps showing when the event occurred

Activity logs reportedly show whether the user watched a video, downloaded it, or viewed a channel. Search histories are also included, which raises serious privacy concerns if the data is made public.

How is Mixpanel linked to the breach?

The alleged breach appears to be linked to a separate security incident in November involving Mixpanel, a data analytics provider that previously worked with Pornhub. The previous violation occurred after an incident. striking attack It gave threat actors access to Mixpanel systems. However, Mixpanel says it does not believe the Pornhub data comes from this incident. The company stated that it found no evidence that the data was taken during the November 2025 breach. Pornhub also announced that it stopped working with Mixpanel in 2021. This means the stolen data is several years old. Reuters contacted some Pornhub customers to verify the claims. These users confirmed that the data linked to their accounts was accurate but not up to date, which is in line with the Mixpanel timeline.

What Pornhub said was not revealed

Pornhub moved quickly to reassure users following the reports. The company said in a security statement:

“This was not a breach of Pornhub Premium systems. Passwords, payment details and financial information remain secure and are not compromised.”

This distinction directly reduces the risk of financial fraud. But revealing viewing habits and search activities still poses long-term privacy risks. We reached out to Pornhub for comment but did not hear back before our deadline.

Why do ShinyHunters remain a serious threat?

Bright Hunters has been linked to some of this year’s most devastating data breaches. The group relies heavily on social engineering tactics: phishing And shooter providing access to corporate systems. Once inside, the group often steals large data sets and uses extortion threats to force companies to pay ransom. This strategy has impacted businesses and users worldwide.

PASSWORD MANAGER RECEIVED FINE AFTER MAJOR DATA BREACH

A hacking group says it has obtained very old Pornhub Premium user data, including viewing activity and search history. Pornhub says its core systems were not breached. (Photo: Donato Fasano/Getty Images)

Pornhub warns Premium members about direct contact from hackers

Pornhub has updated its online notice to warn Premium members about possible direct contact with cybercriminals. In the case of adult platforms, such support is often sexual blackmail attemptsCriminals threaten to reveal private activities unless victims pay.

“We are aware that those responsible for this incident have threatened to contact affected Pornhub Premium users directly. As such, you may receive emails claiming to have your personal information. As a reminder, we will never ask for your password or payment information via email.”

Pornhub remains one of the most visited adult video platforms in the world. People can view content anonymously or create accounts to upload and interact with videos.

PETCO CONFIRMED MAJOR DATA BREACH INVOLVING CUSTOMER DATA

ShinyHunters has claimed responsibility for a massive Pornhub data leak containing alleged logs of user activity. The company says passwords and payment details remain secure. (Photo: Morteza Nikoubazl/NurPhoto via Getty Images)

Ways to stay safe after a data breach

Even if the data is several years old, users should take this opportunity to strengthen their digital security.

1) Change your passwords

Start by updating your Pornhub password. Then change the password of any email or payment account linked to it. Using a password manager makes it easy to create and store strong, unique passwords.

Next, see if your email has been subject to past breaches. Our #1 pick for password managers (see Cyberguy.com/Passwords) includes a built-in breach scanner that checks to see if your email address or passwords appear in known leaks. If you find a match, immediately replace reused passwords and secure those accounts with new, unique credentials.

Check out the best expert-reviewed password managers of 2025 at: cyberguy.com

2) Be wary of phishing attempts and install strong antivirus software

Data breaches often lead to follow-on scams. Be wary of emails, texts, or phone calls that refer to Pornhub or account issues. Avoid clicking links, downloading attachments, or sharing personal information if you cannot verify the source. Installing a strong antivirus program adds another layer of defense against malicious links and downloads.

The best way to protect yourself from malicious links that install malware and potentially access your private information is to have strong antivirus software installed on all your devices. This protection also keeps your personal information and digital assets safe by alerting you to phishing emails and ransomware scams.

Get my picks for the 2025 best antivirus protection winners for your Windows, Mac, Android, and iOS devices at: cyberguy.com

3) Use a data removal service to limit future risks

Data removal services work to remove your personal information from data broker websites that collect and sell details such as email addresses, locations and online identifiers. If data leaked from this breach is shared, resold, or cross-referenced with intermediary databases, removing your information could make it much more difficult for fraudsters to link that information to you.

This step is especially important after high-profile breaches involving activity data. Narrowing the publicly available information about you reduces the risk of spear phishing, impersonation, and long-term privacy harm.

Check out my top picks for data removal services and run a free scan to see if your personal information is already on the internet by visiting: cyberguy.com/Delete

Take advantage of free scanning to find out if your personal information is already on the internet: Cyberguy.com/FreeScan

4) Consider protecting against identity theft

Identity Theft companies can track your personal information, such as your Social Security Number (SSN), phone number, and email address, and alert you if it is sold on the dark web or used to open an account. Early warnings can help limit the damage if your data is exposed. They can also help freeze your bank and credit card accounts to prevent further unauthorized use by criminals.

See my tips and top picks on how to protect yourself from identity theft at: cyberguy.com

5) Add extra privacy protection with VPN

VPN helps protect your browsing activity by masking your IP address and encrypting your internet traffic. This is especially true in breaches like this, where the activity data exposed may include location signals or usage patterns. While a VPN cannot erase past exposure, it does reduce how much new information is visible going forward, making it harder for future activity to be attributed to you. Consistently using a VPN can also limit cross-site tracking, which helps reduce your overall digital footprint after a breach.

For the best VPN software, check out my expert review of the best VPNs for private browsing the web. Windows, Mac, Android and iOS devices -most cyberguy.com

CLICK TO DOWNLOAD FOX NEWS APPLICATION

Kurt’s important takeaways

The massive data leak at Pornhub shows how long stored user information can remain a risk. Even if passwords and payment details are not disclosed, activity data could still cause harm if disclosed. ShinyHunters has shown a willingness to apply pressure through public threats. As a result, you should remain vigilant and proactive about your online security.

Should companies be allowed to keep years of user activity data when it’s no longer needed? Let us know by writing to us. cyberguy.com

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent safety alerts and special deals straight to your inbox. You’ll also get instant access to my Ultimate Scam Survival Guide – free when you join my channel CYBERGUY.COM newsletter

Copyright 2025 CyberGuy.com. All rights reserved.