PornHub is facing extortion from the ShinyHunters gang after the search and watch history of its Premium members was stolen in a breach involving analytics provider Mixpanel. On November 8, 2025, Mixpanel was compromised through a phishing attack, leading to the exposure of sensitive data. PornHub confirmed that only historical data from 2021 or earlier was affected, and reassured users that passwords and payment details remain secure. However, the gang claims to have obtained 94GB of data, including over 200 million records. ShinyHunters has begun sending extortion emails to affected companies, warning that the stolen data will be made public unless a ransom is paid. They provided samples of the data, which includes email addresses, activity types, locations, video URLs, and timestamps. This breach is part of a broader pattern of activity by ShinyHunters, which has previously targeted various companies by exploiting Salesforce integrations and other vulnerabilities. The group is now also developing a ransomware-as-a-service called ShinySpid3r, further highlighting their expanding reach in cybercrime.