**Hacker Group Extorts Pornhub Over Premium User Data**

Pornhub's premium subscribers may have thought they were getting more for their money, but in reality, they've got a whole lot more to worry about. A recent report from Bleeping Computer reveals that a prominent hacking group has managed to breach the data of PornHub's paying members as part of an extortion attempt.

The hacking group behind the breach is none other than ShinyHunters, who made headlines earlier this year when they successfully extorted AT&T into making a payment to make the situation go away. This time around, it appears that the group has managed to get their hands on 94GB worth of data from PornHub users, with over 201 million records in total.

According to Pornhub's own security notice, the breach was not a result of their systems being compromised, but rather through a third-party vendor called Mixpanel. In November, ShinyHunters managed to breach Mixpanel using an SMS phishing attack, giving them access to a significant amount of records associated with companies that work with Mixpanel, including PornHub.

The data obtained by ShinyHunters contains sensitive information such as credit card numbers and passwords, although Pornhub claims that this information remains secure. However, the records also contain more personal bits of data, including user search history, watch history, download activity, and email addresses, which can be linked to something personally identifiable.

This breach is particularly embarrassing for Pornhub, considering it's a company that deals with sensitive adult content online. The fact that they claim not to have worked with Mixpanel since 2021 only adds to the embarrassment, as it suggests that the records obtained by ShinyHunters are likely older but still highly sensitive.

While this breach may seem like a minor issue compared to other data breaches in recent years, it serves as a chilling reminder of the risks associated with sharing personal data online. With more and more companies relying on users' data to operate, it's becoming increasingly clear that we're putting our trust in these organizations at our own peril.

As states and countries continue to crack down on underage access to adult content online, Pornhub and other similar companies are being tasked with verifying the ages of their users. This involves collecting sensitive information such as government IDs, which can be used for identification purposes.

The fact that these companies are increasingly relying on third-party vendors like Mixpanel to store this data only adds to the risk. When breaches occur, it's not just the company's reputation that's at stake – it's also the trust of its users, who may have shared sensitive information in good faith.

In light of this breach, it's essential for Pornhub and other companies like it to take steps to ensure that their users' data is secure. This includes investing in robust cybersecurity measures and implementing strict data protection policies to prevent similar breaches from occurring in the future.