Pornhub issues critical alert following security breach affecting 200 million users

Pornhub has revealed that an ‘unauthorized party’ managed to access the analytics of numerous users during a cybersecurity incident in 2025.

The adult website disclosed a statement earlier this week indicating a recent cybersecurity breach that compromised a significant portion of user data.

They assured that although there was a breach, Pornhub’s system itself remained unaffected, ensuring that passwords, payment details, and financial information stayed secure and were not exposed.

In their statement, Pornhub noted: “A recent cybersecurity incident involving data from a third-party data analytics service provider has impacted some Pornhub Premium users. Specifically, this situation affects only select Premium users.”

Premium users pay a monthly subscription of $14.99 for exclusive access to a vast collection of videos unavailable to free users.

According to a report by Bleeping Computer, the cybercriminals allegedly accessed data records comprising email addresses, locations, video titles, search keywords, activity types, and timestamps for over 200 million entries pertaining to these premium users.

Pornhub explained that the breach was linked to an analytics vendor, Mixpanel, which encountered a breach as recently as November. The attackers utilized a SMS (smishing) attack to infiltrate the system.

Pornhub clarified that their collaboration with Mixpanel ceased in 2021, suggesting that the compromised data would be historical analytics data from that year or earlier.

The adult website reiterated in another statement: “We recently learned that an unauthorized party gained unauthorized access to analytics data stored with Mixpanel, a third-party data analytics service provider.

“The unauthorized party was able to use this unauthorized access to extract a limited set of analytics events for some users.”

Mixpanel has refuted this claim.

Speaking with the outlet, the company stated that they do not think the data originated from their recent November breach.

Mixpanel commented: “Mixpanel is aware of reports that Pornhub has been extorted with data that was allegedly stolen from us.

“We can find no indication that this data was stolen from Mixpanel during our November 2025 security incident or otherwise.

“The data was last accessed by a legitimate employee account at Pornhub’s parent company in 2023. If this data is in the hands of an unauthorized party, we do not believe that is the result of a security incident at Mixpanel.”