**PornHub Hit by Massive Data Breach: ShinyHunters Claims Theft of 200M Records**
PornHub is facing a major data breach after the notorious hacking group ShinyHunters claimed responsibility for stealing 94GB of sensitive user data, encompassing over 201 million records. The compromised information includes email addresses, geographic locations, video search histories, download activity, and keywords tied to premium subscribers’ viewing habits.
ShinyHunters, a prolific black-hat hacking collective, has been linked to multiple high-profile breaches this year, including attacks on Qantas, Google, Louis Vuitton, Dior, Tiffany & Co., and Salesforce. The group reportedly sent an extortion demand to PornHub, though the company has not publicly confirmed the breach.
New Zealand’s Privacy Commissioner has been notified, though no official statement has been released. Authorities note that such incidents may fall under criminal jurisdiction, with potential implications under privacy laws if evidence of unauthorized data collection is provided.
The breach underscores the ongoing risks of large-scale cyberattacks targeting sensitive user data.
MindGeek cybersecurity rating report: https://www.rankiteo.com/company/mindgeek
"id": "MIN1766042250",
"linkid": "mindgeek",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Premium members (201,211,943 '
'records)',
'industry': 'Adult Entertainment',
'name': 'PornHub',
'type': 'Company'}],
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '201,211,943',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (personal and sensitive user '
'activity)',
'type_of_data_compromised': ['Email addresses',
'Locations',
'Video names',
'Keywords',
'Search histories',
'Watch/download activity']},
'description': 'An extortion demand sent to PornHub claims 94GB of data '
'containing over 200 million records of personal information '
'was stolen in the breach. ShinyHunters, a black-hat criminal '
'hacker group, took responsibility for the attack and '
'extortion attempts. The data includes email addresses, '
'locations, video names, keywords, search histories, and '
'subscriber activity.',
'impact': {'brand_reputation_impact': 'Potential brand reputation damage',
'data_compromised': '94GB of data with over 200 million records',
'identity_theft_risk': 'High risk of identity theft',
'legal_liabilities': 'Potential legal liabilities under privacy '
'regulations'},
'motivation': 'Extortion',
'ransomware': {'data_exfiltration': 'Yes'},
'references': [{'source': 'BleepingComputer'},
{'source': 'New Zealand’s Privacy Commissioner'},
{'source': 'Netsafe'}],
'regulatory_compliance': {'regulations_violated': ['Potential Privacy Act '
'violations'],
'regulatory_notifications': 'New Zealand’s Privacy '
'Commissioner '
'approached for '
'comment'},
'threat_actor': 'ShinyHunters',
'title': 'PornHub Data Breach and Extortion by ShinyHunters',
'type': 'Data Breach and Extortion'}