In the quiet corners of digital life where privacy feels most assumed, a hacking group known as ShinyHunters has surfaced to remind premium subscribers of Pornhub that intimacy and anonymity are never guaranteed online. The group claims to hold stolen personal data and browsing histories, demanding Bitcoin ransom while Reuters confirmed the authenticity of sample records with affected users in Canada and the United States. What makes this breach particularly unsettling is not merely the exposure itself, but the unresolved dispute between Pornhub and its analytics partner Mixpanel over who bear
ShinyHunters hackers demand Bitcoin after claiming Pornhub premium user data theft
Premium users' personal data and browsing history exposed, affecting individuals across multiple countries with privacy and potential blackmail risks.
The group declined to provide details about how the information was obtained.
Mark
So ShinyHunters says they have data from fourteen premium users. Reuters verified three of them. That's a pretty small sample—does that mean the breach is small, or just that the sample was small?
Mimi
The sample was small. Reuters was able to confirm three people, but ShinyHunters claimed fourteen in the sample they provided. Reuters didn't say the total breach was only fourteen accounts—they said they couldn't establish the scope or scale. It could be much larger.
Luke
Right, and that's the key gap here. We know three people confirmed their data was real. We don't know if those three represent the whole breach or just the tip. ShinyHunters could be bluffing about the size, or they could have thousands of records.
Mark
And the origin—Pornhub blames Mixpanel, Mixpanel says no. Who's telling the truth?
Mimi
That's genuinely unresolved. Mixpanel says their November incident didn't touch Pornhub's data, and that Pornhub's data was last accessed legitimately in 2023. But Mixpanel also says they notified all affected clients, and Pornhub wasn't on that list. So either Pornhub's data wasn't compromised in the Mixpanel breach, or Pornhub wasn't told.
Luke
Or there's a third possibility nobody's addressing: the data could have come from somewhere else entirely. ShinyHunters could have gotten it from a different breach, a different vulnerability, an insider at Pornhub. The fact that Mixpanel had a breach in November doesn't mean that's where this data came from. Both companies are pointing at each other, but neither has proven where the data actually originated.
Mark
So the users affected—they don't know what happened to their information?
Mimi
Not from official sources. Pornhub hasn't said how many people were affected or what information was taken. Mixpanel says it wasn't them. The users are in the dark.
Luke
And that's the real problem. The companies are in a blame dispute while the people whose data is at stake have no clarity and no way to protect themselves.
The Pulse
- ShinyHunters, a group with a documented history of high-profile extortion campaigns, is threatening to publish intimate user data unless a Bitcoin ransom is paid — and their track record suggests the threat is credible.
- Reuters independently confirmed the stolen data's authenticity by reaching three affected users across Canada and the United States, raising the stakes from rumor to verified crisis.
- Pornhub and analytics provider Mixpanel are pointing fingers at each other over the breach's origin, leaving affected users with no authoritative explanation of how their information was compromised.
- The exposed data includes personal details and browsing histories of premium subscribers — information whose publication carries serious risks of blackmail, social harm, and reputational damage for individuals across multiple countries.
- With ShinyHunters also linked to recent attacks on Salesforce and UK luxury retailers, this incident fits a pattern of escalating, targeted extortion against platforms holding sensitive user data.
In the quiet corners of digital life where privacy feels most assumed, a hacking group known as ShinyHunters has surfaced to remind premium subscribers of Pornhub that intimacy and anonymity are never guaranteed online. The group claims to hold stolen personal data and browsing histories, demanding Bitcoin ransom while Reuters confirmed the authenticity of sample records with affected users in Canada and the United States. What makes this breach particularly unsettling is not merely the exposure itself, but the unresolved dispute between Pornhub and its analytics partner Mixpanel over who bears responsibility — leaving those affected without a clear account of how their most private digital lives became a bargaining chip.
A hacking group calling itself ShinyHunters announced this week that it had stolen personal data from Pornhub premium subscribers and was demanding Bitcoin to prevent its publication. Reuters verified the claim's credibility by contacting three affected users — two in Canada, one in the United States — who confirmed that account details in the sample data were genuine, though the information appeared to be several years old.
The full scope of the breach remains murky. ShinyHunters shared data from fourteen claimed premium accounts but declined to explain how the information was obtained. Pornhub, which draws more than 100 million daily visits, and its Ottawa-based parent company Ethical Capital Partners did not respond to requests for comment.
On December 12, Pornhub acknowledged a cybersecurity incident involving Mixpanel, a third-party analytics firm, describing it as affecting an unspecified number of premium users through a limited set of analytics events. Mixpanel had disclosed its own security incident on November 27 — weeks before Pornhub's statement followed.
The question of responsibility has since become contested. Mixpanel stated that its thorough investigation, conducted with external cybersecurity experts, found no evidence that the data in ShinyHunters' possession originated from its November breach. The company noted that Pornhub's data within its systems was last accessed by a legitimate employee account in 2023, and that Pornhub was not among the clients it notified as affected. ShinyHunters, however, told Reuters the data was directly connected to the Mixpanel incident.
The dispute leaves affected users in a deeply uncertain position — unable to learn from any official source what truly happened to their information, or how their most private digital activity became leverage in an extortion campaign. ShinyHunters' involvement in recent attacks on Salesforce customers and UK retailers suggests this is no idle threat, even as the breach's origins remain unresolved.
A hacking group calling itself ShinyHunters announced this week that it had stolen personal data belonging to premium subscribers of Pornhub and was demanding Bitcoin to prevent the information from being published. The group provided sample data to Reuters, which was able to verify its authenticity by contacting three affected users—two men in Canada and one in the United States—who confirmed that details matching their accounts were genuine, though the information appeared to be several years old.
The scope of the breach remains unclear. ShinyHunters shared data from what it claimed were fourteen premium account holders, but the group declined to provide details about how the information was obtained. Pornhub, which reports more than 100 million daily visits and 36 billion visits annually, offers its premium service with high-definition video, ad-free viewing, and virtual reality content. The company and its parent organization, Ethical Capital Partners based in Ottawa, did not respond to requests for comment.
On December 12, Pornhub released a statement acknowledging a cybersecurity incident involving Mixpanel, a third-party analytics provider that tracks user data and behavior for its clients. According to Pornhub, the breach affected an unspecified number of premium users and involved what the company described as a limited set of analytics events. Mixpanel had disclosed its own security incident on November 27, prompting Pornhub's disclosure weeks later.
However, the question of responsibility has become contested. Mixpanel stated that it found no evidence the data in ShinyHunters' possession came from its November incident. The company said that Pornhub's data in Mixpanel's system was last accessed by a legitimate employee account at Pornhub's parent company in 2023. If unauthorized parties now hold this information, Mixpanel argued, it did not result from a security failure on their end. The company said it conducted a thorough investigation with external cybersecurity experts and notified all affected clients—and that Pornhub was not among them.
ShinyHunters, for its part, told Reuters the data was connected to the recent Mixpanel incident. The group demanded a ransom in Bitcoin and threatened to publish the stolen information if payment was not made. Mixpanel rejected this claim, saying its investigation was comprehensive and that it was confident Pornhub's data was unrelated to the November breach.
ShinyHunters is not a new threat. The group has been linked to a series of high-profile breaches and extortion campaigns in recent months, including attacks on Salesforce customers and luxury retailers in the United Kingdom. The group's track record suggests this is not an idle threat, though whether the data actually exists in the quantity claimed, or whether it truly originated from the Mixpanel incident, remains unconfirmed by either Pornhub or Mixpanel themselves. The dispute over the breach's origin leaves the affected users in an uncertain position—unable to know from official sources what happened to their information or how it was compromised.
Notable Quotes
We're demanding a ransom payment in Bitcoin to prevent the publication of data and delete the data.— ShinyHunters, in statement to Reuters
We are confident Pornhub was not among those clients and that this data is unrelated to the November incident.— Mixpanel spokesperson
Want the full story?
Read the original at The Economic Times ↗
General News