Pornhub issues major warning after adult website hit by security breach that impacts 200 million users

Pornhub has confirmed that an ‘unauthorized party’ was able to gain access to the analytics of many of its users in a 2025 cybersecurity incident.

Adult website Pornhub issued a statement earlier this week that it had recently suffered a cybersecurity incident that had jeopardized much of the data it stores on its users.

They clarified that despite this breach, it was not of Pornhub’s system, meaning that the passwords, payment details and financial information remain secure and were not exposed.

In a statement, the company said: “A recent cybersecurity incident involving data from a third-party data analytics service provider has impacted some Pornhub Premium users. Specifically, this situation affects only select Premium users.”

Premium users pay $14.99 a month to access millions of videos that non-paying users do not have access to.

Pornhub said the cybersecurity incident would only impact Pornhub premium users (Getty Stock Image)

However, what the cybercriminals reportedly got access to was data records that include email addresses, location, video titles, search keywords, activity types and timestamps for over 200 million entries for these premium users, according to a report by outlet Bleeping Computer.

Pornhub went on to say that it had been impacted by an analytics vendor Mixpanel, which suffered a breach as recent as November of this year.

An SMS (smishing) attack enabled those responsible to compromise its system.

Pornhub has said it has not worked with Mixpanel since 2021, noting that the data that was stolen would be historical analytics data from that year or earlier.

In a statement, the adult website reiterated: “We recently learned that an unauthorized party gained unauthorized access to analytics data stored with Mixpanel, a third-party data analytics service provider.

Some of the data that was stolen includes users email addresses, location and key word searches (Getty Stock Image)

“The unauthorized party was able to use this unauthorized access to extract a limited set of analytics events for some users.”

Mixpanel has dismissed this idea, however.

Speaking to the outlet, the company said it does not believe the data originated from the recent November breach.

The company said: “Mixpanel is aware of reports that Pornhub has been extorted with data that that was allegedly stolen from us. We can find no indication that this data was stolen from Mixpanel during our November 2025 security Incident or otherwise.

“The data was last accessed by a legitimate employee account at Pornhub’s parent company in 2023. If this data is in the hands of an unauthorized party, we do not believe that is the result of a security incident at Mixpanel."