The notorious hacking group ShinyHunters has claimed responsibility for a data breach affecting Pornhub Premium users.
However, the incident actually occurred at Mixpanel, a third-party analytics provider.
The breach has exposed limited user data, raising fresh concerns about supply chain security risks in the adult entertainment industry.
ShinyHunters Targets Analytics Provider
ShinyHunters, infamous for previous high-profile attacks including LinkedIn data dumps, publicly announced the breach on BreachForums.
The group advertised “fresh Pornhub Premium user analytics” alongside datasets allegedly stolen from other major platforms like Google and ChatGPT.
Security researchers have verified that the group’s claims align with internal notifications Mixpanel sent to affected clients.
The breach occurred entirely within Mixpanel’s infrastructure rather than Pornhub’s systems directly.
According to the company’s official statement, only a “limited set of analytics events” for some Premium subscribers were compromised.
Importantly, Pornhub stopped using Mixpanel’s services in 2021, yet legacy data from that period remained vulnerable.
The compromised information includes user interaction data such as session logs and behavioral metrics.
However, Pornhub has confirmed that no sensitive information was exposed passwords, login credentials, payment details, and government-issued identification documents remain secure. This significantly limits the immediate risk to affected users.
Pornhub immediately launched an internal investigation upon receiving Mixpanel’s alert, working with cybersecurity experts and law enforcement authorities.
The company emphasized its commitment to maintaining best cybersecurity practices and compliance with international privacy standards.
Security experts recommend that affected users enable multi-factor authentication and monitor their accounts for suspicious activity or phishing attempts.
Users should avoid responding to any emails claiming to be from Pornhub requesting password resets, as login credentials were not compromised.
This incident underscores ongoing supply chain vulnerabilities, similar to previous SolarWinds and MOVEit attacks, demonstrating how discontinued vendor relationships can create security risks years later.
Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.
