Particle.news
Download on the App Store

ShinyHunters Extorts Pornhub With Claimed 94 GB of User Activity Data as SoundCloud Confirms Separate Breach

The incidents spotlight third‑party analytics risks and unresolved questions over how and when sensitive logs were accessed.

Overview

  • Reuters reviewed a sample provided by ShinyHunters and confirmed details with at least three Pornhub Premium users, who said the data appeared genuine though several years old.
  • ShinyHunters is demanding a Bitcoin payment and threatening publication, and the group’s usual darknet and Telegram channels were offline on Wednesday, limiting independent checks on any releases.
  • Pornhub says only selected Premium customers were affected and no passwords or payment information were exposed, tying the issue to analytics vendor Mixpanel, while Mixpanel disputes a direct link and cites 2023 access timestamps.
  • BleepingComputer reports the dataset includes premium users’ email addresses, search terms, viewing and download activity, video titles and URLs, timestamps, and coarse location information.
  • SoundCloud says unknown attackers accessed internal systems, caused temporary outages, and viewed personal data for about 20% of users, including email addresses, with passwords and credit card data unaffected.