There have been one of the biggest data security violations in the history of the adult entertainment industry. The orange platform, known worldwide as PornHub, was the victim of a hacking attack that revealed the data of millions of Premium users.The leak includes the search, viewing and downloading history of content from 2016-2023, which makes the practice of storing data by Internet giants questionable.
Details of the attack
According to reports, behind the leak is ShinyHunters' hacker group, known for previous loud attacks on large corporations. The data was not stolen directly from PornHub servers, but by security breach at Mixpanel's external analyst provider.ShinyHunters say they've scored 94 GB of data containing more than 200 million records, including user identification and platform activity. This attack was confirmed by numerous sources, including specialized cybersecurity portals, which received data samples from hackers.
The ShinyHunters group not only exposed the leak, but also began blackmailing PornHub, demanding ransom in exchange for not publishing full data. The incident occurred in December 2025 and the first information about it appeared on December 16.Data comes from almost ten years, which raises questions about why companies store such old information about users, including personal data and activity history.
Scale and range of leakage
Leak only applies to Premium PornHub userswho paid for access to exclusive content. It includes:
- Search History: Detailed queries entered by users, which may reveal their preferences and interests.
- View History: List of watched films and time spent on the platform.
- Download History: Information about the downloaded materials.
- Personal data: E-mail addresses, user names and other identifiers that may allow you to connect your activity with specific individuals.
Experts estimate that this breach can affect millions of people worldwide, including in Poland, where PornHub is very popular. ShinyHunters claim the data was obtained through an exploit in the Mixpanel system.
Consequences for users and companies
The consequences for injured users can be catastrophic. Revealing the history of viewing adult content can lead to blackmail, social stigma, or even professional problems. In an era where personal data is used to target advertising or manipulation, such a leak increases the risk of identity theft and phishing attacks.
PornHub, a Canadian company owned by Aylo (formerly MindGeek), confirmed the incident and stated that she was working with law enforcement to minimise damage. Mixpanel also issued a statement in which it admits to breach and promises to strengthen its security features. However, experts criticise both companies for storing data for such a long time – over two years, which is a practice incompatible with the best standards of privacy protection such as GDPR in Europe.
Responses and expert opinions
In the cybersecurity community, this leak sparked a wave of discussion. "Why do companies store user data for a decade? This is not only a risk, but also an unnecessary risk to privacy," commented an analyst from BleepingComputer. The ShinyHunters Group, responsible for previous attacks on companies such as Microsoft or AT&T, once again proves how even the largest platforms are vulnerable.
In Poland, where personal data protection is regulated by GDPR, injured users can report the incident to the Office for Personal Data Protection (UODO). Experts advise you to change passwords immediately, monitor bank accounts and avoid similar platforms without double-step verification.
Privacy in the network
The big data leak from the Orange platform is a warning to all internet users: Internet privacy is fragile. This incident highlights the need for better regulation of data storage and recalls that even "anonymous" online activity can be revealed. PornHub and Mixpanel now have to face not only hackers, but also the growing discontent of users and regulators. In the future, such events can change the way we use digital content – in the interests of greater care and protection.
Source:bleedingcomputer.com
