ShinyHunters allegedly hacks Pornhub, demands Bitcoin ransom for 2025

NEWNow you can listen to Fox News articles!

Pornhub deals with new consequences after hacker group ShinyHunters has claimed responsibility for the massive leak of user data. The group says it stole 94GB of data associated with more than 200 million records and is now trying to extort ransom money from the company in Bitcoin.

According to BleepingComputer, the hackers say they will publish the data if their demands are not met. Pornhub has acknowledged the situation but claims its core systems were not broken.

Subscribe to my FREE CyberGuy Report
Get my best tech tips, breaking security alerts, and exclusive offers straight to your inbox. Plus, you'll get instant access to my ultimate scam survival guide – free when you join my CYBERGUY.COM newsletter

Data leak reveals information about 400 thousand bank clients

Pornhub is facing new consequences after hackers said they stole millions of user records linked to premium accounts. The group is threatening to publish confidential activity data unless it is paid for in Bitcoin. (Philip Dulian/Photo Alliance via Getty Images)

What data does ShinyHunters claim was stolen?

ShinyHunters claims that the data exposed concerns Pornhub Premium users. Although financial information was not included, the dataset still contains highly sensitive activity information.

The group claims that the stolen recordings include:

  • Email addresses
  • Type of activity
  • Location
  • Video URLs and Video Titles
  • Video related keywords
  • Timestamps showing when an action occurred

Activity logs reportedly show whether a user has watched, downloaded a video, or viewed a channel. Search history is also included, which raises serious privacy concerns if the data is shared publicly.

How Mixpanel is related to hacking

The alleged breach appears to stem from a separate security incident that occurred in November involving Mixpanel, a data analytics provider that previously worked with Pornhub. This earlier violation occurred after crushing attack gave attackers access to Mixpanel systems. However, Mixpanel says it does not believe the Pornhub data originated from this incident. The company said it found no evidence that the data was obtained in the November 2025 hack. Pornhub also clarified that it will stop working with Mixpanel in 2021. This means that the stolen data will be several years old. Reuters contacted some of Pornhub's customers to verify the claims. These users confirmed that the data associated with their accounts was accurate but out of date, consistent with Mixpanel's timeline.

What Pornhub says has not been revealed

After the reports, Pornhub quickly reassured users. In a safety notice, the company said:

“This was not a violation of Pornhub Premium's systems. Passwords, payment details and financial information remain secure and have not been compromised.”

This distinction reduces the immediate risk of financial fraud. However, revealing browsing habits and search activity still carries long-term privacy risks. We reached out to Pornhub for comment but did not receive a response by deadline.

Why ShinyHunters remain a serious threat

ShinyHunters has been linked to some of the most damaging data breaches this year. The group relies heavily on social engineering tactics such as phishing And smiling gain access to corporate systems. Once inside, the group typically steals large sets of data and uses extortion threats to force companies to pay ransoms. This strategy has influenced businesses and users around the world.

PASSWORD MANAGER PAID AFTER MAJOR DATA LEAK

A man is typing on his laptop.

The hacking group claims to have obtained years-old data from Pornhub Premium users, including browsing activity and search history. Pornhub says its core systems were not hacked. (Donato Fasano/Getty Images)

Pornhub warns Premium subscribers about direct contact with hackers

Pornhub has updated its online statement to warn Premium members of possible direct contact with cybercriminals. In cases where adult platforms are involved, this type of work often escalates into attempted sex extortionwhere criminals threaten to expose private activities unless victims pay up.

“We are aware that those responsible for this incident have threatened to contact affected Pornhub Premium users directly. Therefore, you may receive emails claiming that they have your personal information. As a reminder, we will never ask for your password or payment information via email.”

Pornhub remains one of the most visited adult video platforms in the world. People can view content anonymously or create accounts to download and interact with videos.

PETCO CONFIRMS MAJOR DATA BREAK RELATING TO CUSTOMER DATA

Hacker at his laptop.

ShinyHunters is claiming responsibility for a massive Pornhub data leak involving alleged recordings of user activity. The company says passwords and payment details remain secure. (Morteza Nikubazl/NurPhoto via Getty Images)

Ways to Stay Safe After a Data Breach

Even if the data is several years old, users should take advantage of this opportunity to strengthen their digital security.

1) Change your passwords

Start by updating your Pornhub password. Then change the password for any email address or payment account associated with it. Using a password manager makes it easy to create and store strong and unique passwords.

Next, see if there is your email has been exposed for past violations. Our #1 password manager (see Cyberguy.com/Passwords) includes a built-in breach scanner that checks to see if your email address or passwords have been involved in known breaches. If you find a match, immediately change any reused passwords and secure those accounts with new, unique credentials.

Check out the best password managers of 2025, reviewed by experts, at Cyberguy.com

2) Be alert to phishing attempts and install reliable antivirus software.

Data breaches often lead to subsequent fraud. Be wary of emails, text messages or phone calls that mention Pornhub or account problems. Do not click on links, download attachments, or share personal information unless you can verify the source. Installing a powerful antivirus program adds another layer of protection against malicious links and downloads.

The best way to protect yourself from malicious links that install malware and potentially access your personal information is to install powerful antivirus software on all your devices. This protection can also alert you to phishing emails and ransomware, keeping your personal information and digital assets safe.

Get my picks for the best antivirus protection winners of 2025 for your Windows, Mac, Android and iOS devices V Cyberguy.com

3) Use a data removal service to limit the risk of future infection.

Data removal services work to remove your personal information from data broker websites that collect and sell data such as email addresses, locations, and online identifiers. If leaked data from this hack is shared, resold, or cross-referenced with broker databases, deleting your information could make it much more difficult for scammers to link it to you.

This step is especially important after high-profile activity data breaches. Reducing publicly available information about you reduces the risk of spear phishing, impersonation, and long-term privacy damage.

Check out my top data removal services and get a free scan to see if your personal information has already been published online by visiting Cyberguy.com/Delete

Get a free scan to see if your personal information has already been published online: Cyberguy.com/FreeScan

4) Consider identity theft protection.

Identity theft companies can track personal information such as your Social Security Number (SSN), phone number, and email address and alert you if it is sold on the dark web or used to open an account. Early warnings can help limit the damage if your data comes to light. They can also help you freeze your bank and credit card accounts to prevent further unauthorized use. criminals.

Check out my tips and best practices on how to protect yourself from identity theft at Cyberguy.com

5) Add extra privacy protection with a VPN.

A VPN helps protect your online activity by masking your IP address and encrypting internet traffic. This is especially true in the case of breaches like these, where the exposed activity data may include location signals or usage patterns. Although a VPN cannot erase past information, it reduces the amount of new information visible in the future and makes it more difficult for people to contact you in the future. Consistent use of a VPN can also limit cross-site tracking, which helps reduce your overall digital footprint after a hack.

For the best VPN software, check out my expert review of the best VPNs for private web browsing on your computer. Windows, Mac, Android and iOS devices V Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Kurt's key takeaways

Pornhub's massive data breach shows how long stored user information can remain at risk. Although passwords and payment details were not exposed, activity data could still be damaging if exposed. ShinyHunters has demonstrated that it is willing to apply pressure through public threats. Therefore, you should remain vigilant and proactive with your online security.

Should companies be allowed to store years of user activity data when it is no longer needed? Let us know by writing to us at Cyberguy.com

Subscribe to my FREE CyberGuy Report
Get my best tech tips, breaking security alerts, and exclusive offers straight to your inbox. Plus, you'll get instant access to my ultimate scam survival guide – free when you join my CYBERGUY.COM newsletter.

Copyright CyberGuy.com 2025. All rights reserved.

Leave a Comment