Curate Feeds | Make Collections | Customize Email Briefs

Critics actually agreed with Donald Trump following his latest boast, just not in the way the president would have wanted. Speaking to reporters after a meda...

ALT: a bald man says 100 billion dollars in a movie scene

Alt: two women are standing in a living room and one of them says that 's not how this works

Adult video platform PornHub is being extorted by the ShinyHunters extortion gang after the search and watch history of its Premium members was reportedly stolen in a recent Mixpanel data breach.

Learn what the PornHub Premium data breach and extortion attack means for user privacy, how it happened, and what steps you should take now to protect yourself.

Adult video platform PornHub is being extorted by the ShinyHunters extortion gang after the search and watch history of its Premium members was reportedly stolen in a recent Mixpanel data breach.

Adult video platform PornHub is being extorted by the ShinyHunters extortion gang after the search and watch history of its Premium members was reportedly stolen in a recent Mixpanel data breach.

Adult video platform PornHub is being extorted by the ShinyHunters extortion gang after the search and watch history of its Premium members was reportedly stolen in a recent Mixpanel data breach.

The adult content website PornHub has fallen victim to extortion by the threat actor group ShinyHunters following the theft of activity data, including search and viewing history, of its Premium members. This breach was a result of a security vulnerability at Mixpanel, an analytics provider used by PornHub. According to the report, Mixpanel was compromised on November 8, 2025, through a smishing attack, which allowed threat actors to access its systems. PornHub confirmed the impact of this breach last week. However, the timeline of events is unclear as the reported attack date is in the future relative to the confirmation date. From a technical standpoint, smishing attacks exploit human vulnerability through deceptive text messages, often leading to credential theft or malware installation. In this case, the compromise of Mixpanel highlights the critical risks associated with third-party vendors in an organization's supply chain. Even robust internal security measures can be undermined by vulnerabilities in external services. The implications of this incident are far-reaching. The stolen data, which includes sensitive user activity information, poses significant privacy risks for affected individuals. Moreover, the use of a third-party analytics provider as an attack vector underscores the importance of comprehensive supply chain risk management. Organizations must not only secure their own systems but also ensure that their vendors adhere to stringent security practices. This incident serves as a stark reminder of the evolving tactics employed by threat actors. The shift from traditional phishing to smishing indicates a trend towards exploiting mobile communication channels, which are often less protected than email systems. Cybersecurity professionals must adapt their defense strategies to include robust protections against smishing attacks, such as user education, multi-factor authentication, and advanced threat detection systems. In conclusion, the PornHub data breach via Mixpanel emphasizes the critical need for holistic cybersecurity strategies that encompass third-party risk management and protection against emerging threat vectors like smishing. However, the inconsistency in the reported timeline warrants further clarification to fully understand the sequence of events.