**PornHub Hit by Massive Data Breach: ShinyHunters Claims Theft of 200M Records**
A major data breach targeting PornHub has exposed over 200 million records of user activity, according to an extortion demand sent to the platform. The hacker group ShinyHunters, known for high-profile cyberattacks, claimed responsibility for the incident, telling BleepingComputer that the stolen 94GB dataset includes sensitive details from premium subscribers.
The compromised data reportedly contains email addresses, user locations, video titles, search keywords, and records of watched or downloaded content, as well as search histories. The breach affects historical activity, raising significant privacy concerns for affected users.
ShinyHunters has been linked to multiple breaches in 2024, including attacks on Qantas, Google, Louis Vuitton, Dior, Tiffany & Co., and Salesforce. Authorities, including New Zealand’s Privacy Commissioner, have been notified, though no official response has been issued yet.
While the Privacy Commissioner’s office notes that unauthorized access to personal data may fall under criminal law, they emphasize that complaints require evidence of what was taken and by whom to proceed under the Privacy Act. The incident underscores the ongoing risks of large-scale data exposure in the adult entertainment industry.
MindGeek cybersecurity rating report: https://www.rankiteo.com/company/mindgeek
"id": "MIN1766373766",
"linkid": "mindgeek",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Premium members',
'industry': 'Adult Entertainment',
'name': 'PornHub',
'type': 'Online Platform'}],
'customer_advisories': 'General advice on reporting hacking incidents to '
'police and Netsafe for guidance on computer security '
'issues.',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '201,211,943',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Email addresses',
'Locations',
'Video names',
'Keywords associated with videos',
'Watch/download activity',
'Search histories']},
'description': 'An extortion demand sent to PornHub claims 94GB of data '
'containing over 200 million records of personal information '
'was stolen in the breach. ShinyHunters, a black-hat criminal '
'hacker group, took responsibility for the attack and '
'extortion attempts, revealing that the data includes '
'historical search, watch, and download activity from the '
'platform’s premium members.',
'impact': {'brand_reputation_impact': 'Potential brand reputation damage',
'data_compromised': '94GB of data containing over 200 million '
'records',
'identity_theft_risk': 'High risk of identity theft',
'legal_liabilities': 'Potential legal liabilities under privacy '
'regulations'},
'motivation': 'Extortion',
'ransomware': {'data_exfiltration': 'Yes'},
'references': [{'source': 'BleepingComputer'},
{'source': 'New Zealand’s Privacy Commissioner'},
{'source': 'Getty Images'}],
'regulatory_compliance': {'regulations_violated': ['Potential violations of '
'the Privacy Act'],
'regulatory_notifications': 'New Zealand’s Privacy '
'Commissioner '
'approached for '
'comment'},
'threat_actor': 'ShinyHunters',
'title': 'PornHub Data Breach and Extortion by ShinyHunters',
'type': 'Data Breach and Extortion'}