PornHub extorted after hackers steal Premium member activity data

PornHub has been targeted by an extortion campaign from the ShinyHunters group, which claims to possess 94GB (≈201 million) of historical Premium-member analytics — including emails, search and watch history, video URLs, and locations — allegedly taken from Mixpanel; Mixpanel disputes that the data was stolen in its November 2025 incident. The report links ShinyHunters to numerous high-profile breaches, exploitation of a 2025 Oracle E-Business Suite zero-day, and the development of a new RaaS called ShinySpid3r, indicating significant ongoing criminal capability and risk.