Overview
- Pornhub confirmed extortion attempts and told users the group may reference stolen details in unsolicited messages.
- The stolen dataset is reported as a 94GB file containing search queries, viewing and download history, email addresses and approximate location data.
- Mixpanel said it detected unauthorized access in early November that led to database exports, exposing clients through a third‑party analytics failure.
- Pornhub advised that it never requests passwords or bank details by email and urged users to treat unexpected messages with suspicion.
- OpenAI and CoinTracker were also affected by the Mixpanel incident, with OpenAI issuing phishing alerts and removing Mixpanel from its services.