Overview
- ShinyHunters sent extortion emails to Mixpanel customers claiming 94GB of data that includes 201,211,943 Pornhub Premium analytics records of historical search, watch, and download activity.
- A sample reviewed by BleepingComputer showed event data containing member email addresses, activity type, location, video titles and URLs, keywords, and timestamps.
- Pornhub says only some Premium users were affected, its own systems were not breached, and no passwords, credentials, payment details, or government IDs were exposed.
- Mixpanel says it found no indication the Pornhub dataset was stolen during its November 2025 incident and says the data was last accessed by a legitimate parent-company employee in 2023.
- Pornhub says it stopped using Mixpanel in 2021, has engaged authorities, and continues to investigate as other Mixpanel clients such as OpenAI and CoinTracker have disclosed impact.