""Mixpanel is aware of reports that Pornhub has been extorted with data that was allegedly stolen from us," a Mixpanel spokesperson told The Register. "We can find no indication that this data was stolen from Mixpanel during our November 2025 security incident or otherwise.""
""Smishing, which combines phishing and SMS messages, is a social engineering scam frequently used by ShinyHunters and its larger cybercrime collective Scattered Lapsus$ Hunters to acquire employee credentials, bypass multi-factor authentication, and gain initial access to corporate systems." "Data extortion crew ShinyHunters, when contacted by The Register, claimed responsibility for the stolen Pornhub analytics data and said it includes users' search and video-watching histories. ShinyHunters would not, however, say how or when they obtained the data.""
Mixpanel reported no indication that the Pornhub analytics data was stolen from Mixpanel during its November 2025 security incident or at any other time. Mixpanel stated the data was last accessed by a legitimate employee account at Pornhub's parent company in 2023 and said unauthorized possession of the data would not appear to result from a Mixpanel security incident. Aylo declined to answer questions and said it stands by its statement while promising updates. Mixpanel disclosed a November 8 smishing campaign that affected some OpenAI customers. ShinyHunters claimed responsibility for the stolen Pornhub analytics data and said it includes users' search and video-watching histories but would not detail how the data was obtained. Pornhub posted a December 12 notice saying the breach involved select Premium users' data and blamed Mixpanel.
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]