Massive Data Breach Allegedly Impacts Millions
Hackers are threatening to release data belonging to more than 200 million Pornhub users after allegedly gaining access to sensitive information from one of the world’s most visited adult websites.
The group behind the attack, known as ShinyHunters, claims to have obtained premium users’ search histories, viewing activity, email addresses, and location data, according to a report by The Guardian.
Bitcoin Ransom Demand
According to Reuters, which has reportedly been in contact with the hacker group, the attackers are demanding payment in Bitcoin in exchange for deleting the stolen data and refraining from publishing it online.
If the claims are verified, the breach could become one of the largest privacy-related cybersecurity incidents involving an adult entertainment platform.
Pornhub Responds
Pornhub has acknowledged that a number of users may have been affected by a cyberattack targeting a third-party data analytics company it previously worked with. However, the company stated that it ended its relationship with the provider in 2021, suggesting that any compromised information is unlikely to be current.
The platform emphasized that its own systems were not directly targeted in the reported incident.
No Evidence of Public Leak Yet
Cybersecurity firm Sophos told The Guardian that it has not found any evidence indicating that the alleged data has been published on known leak sites or within communication channels associated with the ShinyHunters group.
While the claims continue to be investigated, security experts are advising users to remain cautious, monitor their accounts for suspicious activity, and change passwords if they have concerns about potential exposure.
Growing Concerns Over User Privacy
The incident highlights the ongoing risks associated with storing large amounts of personal data online. Breaches involving adult websites are particularly sensitive due to the private nature of the information involved, making affected users potential targets for phishing campaigns, scams, and extortion attempts.
Authorities and cybersecurity researchers are continuing to investigate the claims as more details emerge.
