PornHub is facing extortion after the ShinyHunters gang gained access to historical Premium user data. The breach stems from a previous compromise at Mixpanel, the analytics provider PornHub used until 2021.
Mixpanel suffered a smishing attack on November 8, 2025, which allowed attackers to access systems. PornHub clarified that the exposed data comes from historical analytics records, not its own systems. Passwords, payment information, and other financial data were not affected.
ShinyHunters claims to have obtained 94 gigabytes of data containing more than 200 million records. The information includes email addresses, search history, video watch and download activity, video names, associated keywords, and timestamps.
A sample of the leaked data reviewed by BleepingComputer shows sensitive activity that users would expect to remain private. ShinyHunters confirmed that this is part of a larger trend in 2025, having also targeted Salesforce integration companies, Oracle E-Business Suite, and other analytics platforms.
The group is now creating a ransomware-as-a-service platform called ShinySpid3r. It will allow affiliates, including those connected to Scattered Spider, to conduct ransomware attacks.
For everyday users, this breach highlights how digital footprints can remain exposed years after the fact. Even historical analytics data can be weaponized by cybercriminals. Companies are custodians of this information, but breaches show that the responsibility to protect it extends beyond the moment data is collected.
Email inquiries to hello@laterstack.com
Related Laterstack Cybersecurity Stories
ICE Expands Cybersecurity Contract to Intensify Employee Surveillance
Airbus Moves Critical Workloads to European Sovereign Cloud Amid Security Concerns
Is Your Vibrator Spying on You? Understanding App-Connected Sex Toy Data
Apple and Google Roll Out Emergency Patches After Active Zero-Day Exploits
Reddit has launched a legal challenge against Australia’s groundbreaking under-16 social media ban, filing suit in the nation’s High Court. The forum platform argues the law intrudes on constitutional protections for free political discourse and that Reddit itself should not fall under the definition of a “social media platform.”
The law, which took effect on December 10, 2025, requires ten major platforms to block underage users or face fines of up to A$49.5 million ($33 million). Platforms have been using measures such as activity-based age inference and selfies to enforce the rule. Reddit, however, claims the legislation raises serious privacy concerns and limits the ability of young citizens to engage with political communication before they reach voting age.
“Australian citizens under the age of 16 will, within years if not months, become electors,” Reddit noted in court filings. “The choices to be made by those citizens will be informed by political communication in which they engage prior to the age of 18.”
Government officials, including Health Minister Mark Butler, have dismissed the arguments, framing Reddit’s lawsuit as a corporate effort to protect profits rather than a defense of free speech. “It is action we saw time and time again by Big Tobacco against tobacco control and we are seeing it now by some social media or big tech giants,” Butler said.
With a market capitalization of $44 billion, Reddit has the resources to pursue a lengthy legal battle. Australia represents the company’s fourth-largest market after the United States, the United Kingdom, and Canada, making the stakes particularly high.
The case could set a significant precedent for global tech regulation and the balance between protecting minors and ensuring political expression. While social media companies adapt to new age verification requirements, the legal system will have to navigate the nuanced intersection of technology, law, and civic engagement.
Related Laterstack Tech Stories
For inquiries, tips, or submissions: hello@laterstack.com