ShinyHunters Allegedly Hack Pornhub, Demand 2025 Bitcoin Ransom

Pornhub is facing new problems after hacker group ShinyHunters claimed responsibility for leaking user data. The group claims to have stolen 94GB of data tied to more than 200 million records and is now trying to extort a Bitcoin ransom from the company.

According to a BleepingComputer report, the hackers said they would publish the information if their demands were not met. Pornhub has acknowledged the situation but maintains that its core programs have not been breached.

Sign up for my FREE CyberGuy report
Get my best tech tips, emergency security alerts, and special deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join CYBERGUY.COM newspaper

DATA BREAK EXPOSES 400K BANK CUSTOMER INFORMATION

What data ShinyHunters claims to have stolen

ShinyHunters said the data revealed focused on Pornhub Premium users. Although no financial information is included, the dataset still contains highly sensitive job information.

The group says the stolen records include:

• Email addresses
• Type of work
• Location
• Video URLs and video names
• Keywords are linked to videos
• Timestamps that show when the operation took place

Activity logs are reported to show whether a user has watched or downloaded a video or viewed a channel. Search histories are also included, which raises serious privacy concerns if the data is made public.

How Mixpanel is connected to the breach

The alleged breach appears to be linked to a November security incident involving Mixpanel, a data vendor that has worked with Pornhub. That early breach occurs after a smishing attack gave malicious actors access to Mixpanel’s systems. However, Mxpanel says it does not believe Pornhub’s data came from that incident. The company said it found no evidence that data was taken during its breach in November 2025. Pornhub also clarified that it stopped working with Mixpanel in 2021. That means the stolen data will be several years old. Reuters contacted other Pornhub customers to confirm the claims. Those users have verified that the data tied to their accounts is accurate but out of date, consistent with Mixpanel’s timeline.

What Pornhub said was not revealed

Pornhub moved quickly to reassure users following the reports. In a security statement, the company said:

“This was not a breach of Pornhub Premium plans. Passwords, payment information and financial information remain secure and have not been disclosed.”

That distinction reduces the immediate risk of financial fraud. However, disclosure of browsing habits and search activity still poses long-term privacy risks. We reached out to Pornhub for comment, but did not hear back before our deadline.

Why ShinyHunters remain a major threat

ShinyHunters linked to some of the most disturbing data breaches this year. The group relies heavily on social engineering tactics like this phishing again to blow up gaining access to corporate systems. Once inside, the group often steals large data sets and uses extortion threats to pressure companies into paying ransoms. This strategy has affected businesses and users around the world.

PASSWORD MANAGER PAID AFTER MAJOR DATA BREAK

A hacker group claims to have obtained years of Pornhub Premium user data, including viewing activity and search history. Pornhub says its core programs have not been breached. (Photo by Donato Fasano/Getty Images)

Pornhub warns Premium members about direct communication with criminals

Pornhub has updated its online statement to warn Premium members about possible direct contact with cybercriminals. In cases involving adult forums, this type of access is often increased sextortion attemptswhere criminals threaten to reveal private activities unless victims pay.

“We are aware that the perpetrators have threatened to contact Pornhub Premium users directly. Therefore, you may receive emails claiming to have your personal information. As a reminder, we will never ask for your password or payment information via email.”

Pornhub is still one of the most visited adult video sites in the world. People can watch content anonymously or create accounts to upload and share videos.

PETCO CONFIRMED MAJOR DATA BREAK INVOLVING CUSTOMER DATA

ShinyHunters is claiming responsibility for Pornhub’s massive data leak involving alleged user activity records. The company says passwords and payment information remain secure. (Photo by Morteza Nikoubazl/NurPhoto via Getty Images)

Ways to stay safe after a data breach

Even if the data is a few years old, users should take this opportunity to strengthen their digital security.

1) Change your password

Start by updating your Pornhub password. Next, change the password of any email or payment account linked to it. Using a password manager makes it easy to create and store strong, unique passwords.

Next, see if your email has been exposed in a previous breach. Our #1 password manager (see Cyberguy.com/Passwords) of choice includes a built-in scanner that checks if your email address or passwords came from known leaks. If you find a match, immediately change any passwords that have been reused and secure those accounts with new, different credentials.

Check out the best password managers reviewed in 2025 at Cyberguy.com

2) Stay alert for phishing attempts and install strong anti-virus software

Data breaches often lead to follow-up scams. Be aware of emails, texts or phone calls that refer to Pornhub or account problems. Avoid clicking on links, downloading attachments or sharing personal information without verifying the source. Installing a strong antivirus program adds another layer of defense against malicious links and downloads.

The best way to protect yourself from malicious links that contain malware, which may have access to your private information, is to install strong anti-virus software on all your devices. This protection can alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Find my picks for the best antivirus 2025 winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

3) Use a data deletion service to limit future exposure

Data removal services work to remove your personal information from data vendor websites that collect and sell information such as email addresses, locations and online identifiers. If the leaked data from this breach is shared, resold or referenced in the same way as broker databases, removing your information can make it more difficult for fraudsters to link to you.

This step is especially important after a high-profile data breach involving employee data. Limiting what is publicly available about you reduces the risk of phishing, impersonation and long-term privacy damage.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out there on the web by visiting Cyberguy.com/Delete

Get a free scan to find out if your personal information is already out there on the web: Cyberguy.com/FreeScan

4) Consider identity theft protection

Identity Theft Companies can monitor personal information such as Social Security Number (SSN), phone number, and email address and notify you when it is sold on the dark web or used to open an account. Early warnings can help limit the damage if your data is exposed. They can also help you freeze your bank and credit card accounts to prevent unauthorized use by criminals.

See my tips and top picks on how to protect yourself from identity theft Cyberguy.com

5) Add more privacy protection with a VPN

A VPN helps protect your browsing activity by masking your IP address and encrypting your internet traffic. That’s especially important in a breach like this, where exposed data may include location signals or usage patterns. While a VPN can erase past exposure, it limits how much new information is visible going forward and makes it harder to link future work to you. Using a VPN consistently can reduce tracking across sites, which helps reduce your overall digital footprint after a breach.

For the best VPN software, see my expert review of the best VPNs for private web browsing Windows, Mac, Android & iOS devices of Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS PROGRAM

Kurt’s priority is taking

Pornhub’s massive data leak highlights just how dangerous user information stored for so long can be. Although passwords and payment details are not revealed, transaction data can still be compromised if released. ShinyHunters have shown that they are willing to put pressure on the public by threatening them. As a result, you should always be vigilant and proactive about your online security.

Should companies be allowed to keep years of user data when it is no longer needed? Let us know by writing to us at Cyberguy.com

Sign up for my FREE CyberGuy report
Get my best tech tips, emergency security alerts, and special deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join CYBERGUY.COM newspaper

Copyright 2025 CyberGuy.com. All rights reserved.