Bleepingcomputer

PornHub Extorted After Mixpanel Data Breach Exposes Premium Member Activity

First seen 16 Dec 2025, 06:58 UTC • Bleepingcomputer

•18.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

PornHub is facing extortion from the ShinyHunters gang following the theft of Premium member activity data due to a breach at analytics vendor Mixpanel. The breach occurred on November 8, 2025, when threat actors compromised Mixpanel's systems through an SMS phishing attack.

How this analysis works

Attack Flow

14 entities, 12 inferred relationships (STIX 2.1).

Technique (4)

Data Breach
Phishing
Supply Chain Attack
T1566 - Phishing

Campaign (1)

Drift

Organization (6)

CoinTracker
Gainsight
Mixpanel
OpenAI
PornHub
Salesforce

Vulnerability (1)

CVE-2025-61884

Affected Platform (1)

Oracle E-business Suite

Tool (1)

ShinySpid3r

Relationships

ShinySpid3r exploits CVE-2025-61884
CVE-2025-61884 targets Oracle E-business Suite
Data Breach targets Oracle E-business Suite
Phishing targets Oracle E-business Suite
Supply Chain Attack targets Oracle E-business Suite
T1566 - Phishing targets Oracle E-business Suite
Drift related to CoinTracker
Drift related to Gainsight
Drift related to Mixpanel
Drift related to OpenAI
Drift related to PornHub
Drift related to Salesforce

Continue Reading

Ripple Shares North Korean Threat Intelligence to Combat Evolving Cyber Attacks Escalating Nation-State Cyber Threats Targeting Crypto Sector Icarus Group Exploits Klue OAuth Breach to Steal Salesforce Data Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages U.S. Treasury Launches Cybersecurity Initiative for Digital Asset Firms Amid Rising Threats New macOS Malware Campaign Targets Users via Fake Updates and Script Editor

PornHub Extorted After Mixpanel Data Breach Exposes Premium Member Activity

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading