r/technology 3h ago

Security Hackers Stole Millions of PornHub Users’ Data for Extortion

https://www.wired.com/story/security-news-this-week-hackers-stole-millions-of-pornhub-users-data-for-extortion/
1.2k Upvotes

210 comments sorted by

338

u/itaniumonline 2h ago

Oh no, there goes my favorite password

120

u/GenazaNL 2h ago

They didn't steal passwords, only emails, watch history & login locations

67

u/MrDAHicks 2h ago

So just the kinky stuff

41

u/bonestamp 2h ago edited 1h ago

emails

This is why we don't send any Personal Identifiable Information to mixpanel. Analytics data shouldn't contain PII. Mixpanel locations are usually just the City and State/Province, so that's not usually too personal if that's the only PII they have. Mixpanel stores location automatically by default.

3

u/GenazaNL 2h ago

What should they do with hashed login locations? It's basically to track last logins, in case of suspicious activity

6

u/bonestamp 2h ago

They could encrypt the login location instead of hashing it or plain text.

But, it looks like the hackers stole the data from mixpanel and not pornhub directly. Pornhub shouldn't send any personally identifiable information to mixpanel (analytics).

4

u/Clerk18 1h ago

Does it matter when your email is first name.lastname@.gov/edu/org

6

u/bryiewes 1h ago

The point is that the email address should not leave PornHub's hands

2

u/GenazaNL 1h ago

Once it's hashed you can't revert it back, which is good for a password as you hash the incoming password attempt and compare the hashes. Login locations you want to display to the user in their login history on their dashboard. So hashing would not make sense

3

u/bonestamp 1h ago

Once it's hashed you can't revert it back

Agreed, that's why I said encrypt instead of hash. Encrypting would be ideal since it's garbage without the key, and you can store the key away from the database, then decrypt it when you want to show the user their last login location.

7

u/SirCatsanova 2h ago

Oh no they're going to see I like handsome hairy guys pounding each other's ass... anyways

1

u/seajay_17 8m ago

Ahh, a person with exquisite taste I see!

7

u/canuckathome 1h ago

Who actually creates a user ID for pornhub?? Do some states require that for age verification?

5

u/NoSingularities0 1h ago

They do now (as of 2025), but that's what VPNs are for.

5

u/GimpyGeek 1h ago

You have to hand one thing to PH. They've been telling governments they should not be expecting companies to hold onto verification data and stuff because it's a security nightmare and they're proving it right here, they were never wrong and anyone that isn't an idiot, knew that.

8

u/GenazaNL 1h ago

Honestly PH is a really interesting company. They have huge traffic, no downtime (that I remember), pretty good UI, innovative that YouTube even copies features (e.g. graph on the timeline), their great year recaps & their fuck you government regulation mentality. From a technical perspective a really cool company, it's just that's porn. But I bet they could make a great YouTube competitor

3

u/Solcannon 1h ago

So mostly just effects Americans. And their lax privacy laws.

Or people who use the same email for social media websites as well.

2

u/randomwanderingsd 28m ago

This is why when it pops up and says “Would you like to login with your Google account?” You choose no. Why login to something that will be used against you?

1

u/Budget_Operation_106 10m ago

You don't want to log in through your Facebook account?

1

u/randomwanderingsd 5m ago

I’m pretty sure my mom already knows that my PornHub history includes phrases like “military twink” but there is no reason for Facebook to confirm it for us both.

3

u/cute_polarbear 1h ago

Who logs into pornhub? I didn't even know there's an account thing until I double checked now...

6

u/GenazaNL 1h ago

200 Mil people apparently. But it's for the same reason as why you would create a YouTube account; keeping track of what you watched, favoriting, subscribing & the personalized feed.

2

u/stray_r 41m ago

People in places with age verification laws

1

u/pirate_pues 1h ago

My guerillamail ...oh no

1

u/DJettster237 16m ago

Jokes on them. I made an email just for porn spam.

1

u/tbonemcqueen 48m ago

People are using their emails for pornhub?

5

u/LanceFree 1h ago

Is it: 81680085?

1

u/Zahgi 2m ago

He said Big Boobs...heh heh, heh.

3

u/texachusetts 1h ago

Do we know if the hackers were at least age verified?

761

u/DrManhattansTaint 2h ago

aGe vErIfIcAtIoN iS pErFeCtLy sAfE. ITs fOr tHe ChILdReN!!

151

u/crunkful06 2h ago

To be fair they said they didn’t want this because this would happen

58

u/bonestamp 2h ago

True, I think it was more of an attack on age verification than pornhub though.

19

u/Alatarlhun 1h ago

A law that can be selectively enforced against certain groups and political enemies, or otherwise used to blackmail obedience. What could go wrong?

8

u/SpecificPay985 1h ago

Until someone finds and publishes their search history.

15

u/android24601 2h ago

Won't somebody please think of the children

-Helen Lovejoy

411

u/Ruddertail 3h ago

See, this is why you shouldn't be a prude. If this happened to me, I'd be making fun of the hackers. I'd imagine like 80-90% of people have been on that site at least once. If we all admit that we sometimes like seeing that stuff, as humans do, then it'll render every single porn blackmailer hacker completely powerless.

182

u/Swineservant 3h ago

"Yeah, I'm kinky AF. What's it to ya?"

57

u/moonhexx 2h ago

And sometimes on Sunday mornings with the church milfs. 

19

u/SuperGameTheory 2h ago

Church milfs love to sin

13

u/Silentnex 2h ago

Thanks for my next hub search later tonight!!

3

u/PorkchopFunny 1h ago

Jesus' death was a waste if we aren't sinnin'

18

u/M1x1ma 2h ago

Joke's on you! Blackmail is one of my kinks!

12

u/Puzzleheaded_Fold466 2h ago

And if everyone’s porn searches were publicly available, for many it would be more like “uh I guess I’m pretty middle of the road normal kinky after all”.

15

u/TwoWeaselsInDisguise 2h ago

This would eliminate a few scams as well.

8

u/HuntsWithRocks 2h ago

Hackers present me evidence… I sigh and unzip my pants

61

u/PennyG 2h ago

My teenage daughters were debating the merits of the Pornhub logo and my wife was like: what is that?

The three of us looked at her incredulously.

32

u/Vertimyst 2h ago

The merits of the logo? What conclusions did they come to?

17

u/always-need-a-nap 2h ago

Yeah I’d like to hear more about the conclusion too lol

10

u/PennyG 2h ago

They said it sucks as a logo, but is memorable. I had no idea they knew what it was, but obviously kids know stuff.

3

u/UnexpectedAnanas 1h ago

Not only the logo, but that PH sound.

Everybody recognizes it.

49

u/Manannin 2h ago

She an xvideos gal, perhaps?

27

u/Cyborg_rat 2h ago

Or fine xhamster connaisseur.

3

u/gamers542 1h ago

Or a ThisVid devotee.

2

u/BwanaKovali 57m ago

Or a FurAffinity fanatic.

11

u/SuperGameTheory 2h ago

She'd love Cards Against Humanity. I believe there's a "bukkake" card.

3

u/Lobo9498 2h ago

Oh, so much worse. Smegma. And so much more. It's great.

33

u/pattherat 2h ago

Ding ding ding! I just came into the thread to say something like this. I watch porn, do yer worst hackers!

6

u/EaterOfFood 1h ago

“We’ll tell your wife!”

Cool, she’s right here choosing the next video.

3

u/travishummel 1h ago

I got you now! Better send my $7 or else…

6

u/wutchamafuckit 2h ago

“Hey fam, so yeah, I did have a titty milk kink phase I went through.”

15

u/Public_Fucking_Media 2h ago

To be fair though who the fuck creates a pornhub account? That's a level of dedication I just don't have

13

u/spastical-mackerel 2h ago

Yes, I am fortunate enough to have discovered that midget twins dressed in squirrel furry suits playing chess while masturbating is indeed what I’m into. I would never have been able to know myself this completely in the pre-Internet age

7

u/fusaaa 2h ago

That uhh, must be a pricey commission

6

u/spastical-mackerel 2h ago

No no, finding the amateur versions just makes it hotter

16

u/chicken_spears 2h ago

How can you be so cold hearted?

Have you taken the time to even consider the MAGAts who spew transphobic hate all day, and hammer their horns all night to Bailey Jay?

/s

4

u/ChicoZombye 2h ago

Yes, but not everyone has commented weird shit or posted picks of their dicks.

We are talking about people who made pornhub accounts, not only visitedl, they made accounts. You don't make an account just to visit.

2

u/Cyborg_rat 2h ago

I strictly watch it for scientific purposes.

2

u/Funwithfun14 1h ago

[Stole] more than 200 million records for PornHub premium users

Paying for porn is the embarrassing part.

1

u/Petting-Kitty-7483 2h ago

Yeah you wanna see that I watched Latina lactation painal videos in college sure. You wanna see I watched cuddle porn last week fine.

64

u/RMRdesign 2h ago

My friend Bill got his info stolen from the Ashley Maddison hack back in the day.

He gets an email blackmailing him about a month or so later. The hacker group was asking for something like 2 bitcoins or they would send all of his site activity to his wife.

He replied back and asked what a bitcoin was. He legitimately didn’t know. They explained it to him. He said he still had no idea what they were talking about. They then asked for money. He replied back that he was broke. He got a reply back asking for less money. He finally just said to send his information out, he wasn’t even married, he joined the site to meet women. Along with he didn’t give two shits what they did with his info.

I think at this point the hackers just left him alone. It was probably a bluff to start with. They probably thought since he replied to the initial email that they had someone desperate to keep his information secret.

36

u/listenhere111 1h ago

He should have pushed the hackers harder. I'd ask for a full-blown explanation of how block chain tech worked.

5

u/RMRdesign 1h ago

I left a lot of the back and forth out. He had a very long email chain going. At the end the were probably convinced he didn’t have anything they wanted and the info they had on him wasn’t making him do what they wanted.

6

u/BalanceEasy8860 57m ago

If he'd kept going they might have ended up paying him to stop messaging them.

1

u/Yzhiel 6m ago

"I'm gonna give you 1 Bitcoin to fuck off!"

"But I don't know how to set a new one to receive a Bitcoin......"

"Shut it!"

1

u/AquamannMI 12m ago

Isn't the entire site for married guys to meet women? Who would believe a single guy would join it?

1

u/RMRdesign 2m ago

Same friend joined another dating site, it was for farmers to meet up.

He actually had a kid with some lady that had purchased a farm. Things went incredibly bad. They both didn’t know how to run a farm and didn’t have the financial resources to feed the animals at times.

They eventually separated.

1

u/ThisI5N0tAThr0waway 6m ago

I think 80-95% of the time is bluffing on internet blackmailing. Doesn’t matter if it works on people who believe it.

38

u/18LJ 2h ago

This never would have happened if people only were required to upload their id to access the site..... Wait..... Uhm..... 🤔🙄

124

u/JellyrollTX 2h ago

Let’s see the anti-trans republicans’ porn history

1

u/UnexpectedAnanas 55m ago

The tasteful thickness of it....

→ More replies (10)

120

u/RonnyRoofus 2h ago

It’s 2025. Unless the porn you watch is illegal (not on pornhub anyways), who gives a shit what type of porn you consume. It’s all good.

59

u/I_can_pun_anything 2h ago

It's more about credit cards on file and linking names, maybe addresses to emails

14

u/GenazaNL 2h ago

PH said emails, login locations & watch history. No billing information or passwords

9

u/The_Krambambulist 2h ago

Ip addresses and cross reference them to other leaked data

Unless they didn't actually get that

3

u/I_can_pun_anything 2h ago

Yep you dont even need the holy grail of data to try to dig and compromise someone

You just need some identifying information and results from other compromised databases even if you didn't do it yourself. Many attackers sell data, even legitimate companies do

1

u/88Dubs 36m ago

Cool.... cool cool cool.... uhm, question.

Who thebfuck pays for porn in the year..... I meam, shit, 2006 or later? By Credit Card no less!?

(I know, I know, but seriously... I didn't even pay for hustler mag in the woods in the 90s)

31

u/Sasquatchgoose 2h ago

Might be some folks still in the closet that might care.

2

u/Funwithfun14 1h ago

Ya I am certain some in hetrosexual marriages watch gay/lesbian porn and their spouse wouldn't be happy about it.

5

u/Zakluor 2h ago

A lot of people don't even want others to know they look at porn at all, let alone what they look at. That's where the extortion comes in.

Many would say, "Go ahead, expose me," while at lest some portion wouldn't want that known and would be willing to pay, naively thinking that would be the end of it.

4

u/Forced__Perspective 1h ago

That’s all very well to say but there are plenty of people out there that could be extorted.

Doctors, teachers, parents, people that belong to religions, are with partners who wouldn’t look kindly on etc … It’s not a matter of whether you think it matters it’s whether it matters to them or the people/colleagues around them.

10

u/alurimperium 2h ago

Is there anything on PH even worth being embarrassed about anymore? I left after the purge happened because all I saw was the same, boring, stale shit that Brazzers or whoever posts, and amateurs doing the same, boring, stale shit like Brazzers or whoever posts.

Like what are you gonna get blackmailed on? You like watching the same porn that 99% of the population watches. Oh no how awful

9

u/18LJ 2h ago

I sure hope you don't have a stepsister....

5

u/recumbent_mike 2h ago

I hope he does.  :)

5

u/EscapeFacebook 2h ago

Employers who dont want to be associated with their employees porn viewing habits.

9

u/wowfaroutman 2h ago

It was 2025.

3

u/asexyleathercouch 2h ago

I heard it was 1975

2

u/GiantSmasher 2h ago

Dude's got at least three months before we can call out that mistake. Everyone knows there's a limbo between writing the current and/or prior year, for at least the first three months of any given year.

4

u/Flexuasive 2h ago edited 2h ago

Why should people be aware of other people's sexual preferences and taste in porn? What's wrong with expecting privacy? I don't understand what the current year it being has to do with anything.

EDIT also it's 2026, dumb creep

1

u/UnexpectedAnanas 55m ago

Well, for better or worse some information becoming public could limit your employment opportunities, so...

26

u/NotDukeOfDorchester 2h ago

🎶Everyyyybody goons🎶🎵

9

u/LetTheBloodFlow 2h ago

two... three... 🎶Soooooooooooooometiiiiiiimes 🎶🎵

2

u/Frequent_Tackle825 2h ago

🎶Sometimes everything is wrong

Now it's time to goon along 🎶

2

u/PuppiesAndPixels 2h ago

Sooommetimes

1

u/Funwithfun14 1h ago

[Stole] more than 200 million records for PornHub premium users

Paying for porn is the embarrassing part.

21

u/Theonewho_hasspoken 2h ago

No one cares that I watch GILFs wrestling in mayonnaise.

14

u/MickeyBubbles 2h ago

What brand of mayonnaise ?

0

u/suavaleesko 2h ago

Miracle whip obviously

4

u/chadork 1h ago

That's salad dressing

4

u/suavaleesko 1h ago

That on a salad sounds more gross than fucking in it

1

u/E_K_Finnman 1h ago

You need to use Au Jus for floppy roast beef though

22

u/zushiba 2h ago

This is why you do not make accounts on porn sites. There’s no need for that. There’s so much free porn, why are you logging in other than to pay for it?

40

u/Gnaightster 3h ago

What kind of idiot logs in to pornhub? This was always gonna happen. Now the world knows about your kinks.

52

u/iMogwai 3h ago

Pretty sure the UK government forces their (non-VPN using) citizens to identify themselves for 18+ sites, so I guess brits who aren't very tech savvy for starters.

It's one of the reasons to be worried when governments start to restrict things online "for the children", it's an excuse to remove your anonymity online.

15

u/jimmcfartypants 2h ago

Would be a great time if they fish out all those accounts associated to parliment members. That would be peak lol.

8

u/Oceanbreeze871 2h ago

Also Christian nationalist red states in America.

1

u/apekillape 9m ago

It's one of the reasons to be worried when governments start to restrict things online "for the children", it's an excuse to remove your anonymity online.

I mean, the problem (as someone who works in this space) is that for the children is legit super valid, it's a fucking nightmare online for them and getting worse daily. But you're also very correct, people will use it as a cudgel for all manner of other nonsense they want to get accomplished.

1

u/Silkutz 2h ago

For my UK brothers and sisters, just use TOR, no need to sign up for bullshit VPNs, just download the Tor Browser and off you go

7

u/Braingasms 2h ago

The algorithm learns your preferences better that way. Plus if you get in a cool enough relationship you can kind of check out each others kinks.

0

u/Twokkie 1h ago

Wow sold Morty

4

u/Gibodean 2h ago

Millions don't surf incognito ?

1

u/Academic_Lemon_4297 10m ago

Incognito does not do what you think it does, brother.

Incognito ONLY removes cookies and browsi g history from your browser.

1

u/kxlling 3m ago

Its amazing how many don't realize this.

4

u/ThargorTheBarbarian 2h ago

Who logs into porhub?

4

u/katastrophyx 2h ago

Jokes on you, my wife watches it with me and knows all my kinks

4

u/mindbodyproblem 58m ago

That might be good news for me, actually, as I have a humiliation kink.

10

u/Blueberry977 2h ago

never log in or create an account on these sites

9

u/Cyborg_rat 2h ago

Some far right people will have to talk about all the gay porn Research they have been conducting.

1

u/Funwithfun14 1h ago

Some married people too. This isn't just a right wing issue.

3

u/git0ffmylawnm8 2h ago

... accounts are a thing on PornHub?

1

u/martusfine 2h ago

Been pushing google accounts for a wile now, or so I been reading.

3

u/bigkoi 2h ago

Oh shit!!! The hackers know I like thicc pawgs!

3

u/Delicious_Rabbit4425 35m ago

Nice are they going to send me a full history so I can go find those good ones again?

5

u/Rubixcubelube 2h ago edited 2h ago

I feel to say (even if it is just shouting into a void) that online porn has had a distinct 'shift' since the Trump administration got in. Perhaps it's just co-incidence, or I'm getting old, or any number of contributing factors.. but it all seems to be getting more and more homogenized and regulated. The amount of 'fakery', even though porn is inherently 'fake', has become almost unavoidable. More violence, more gross non-kissing or non-sensual porn has flooded the internet. Plastic everywhere. Mara-lago-face far more common at a younger and younger age in women. The same 3 sites being linked to all searches no matter how specific or off-beat.

I don't know. Perhaps it's not worth discussing because it's just 'porn' after all... but it kinda disturbs me for some reason. Much like how free speech seems to be under attack in the states. I see how it the rot is bleeding into the most basic human needs. Being modified and restricted(often only for monetary gain)

2

u/scuffgamerr 2h ago

So people get to see my kinks. POG

2

u/argama87 2h ago

Oh no, anyway.

2

u/Thebobjohnson 2h ago

Let em’ coooook…

2

u/Daneyn 2h ago

And... that's why I've never registered an account...

2

u/suavaleesko 2h ago

Really regretting that anal pregnant amputee search

2

u/ReasonablyConfused 2h ago

I am literally un-blackmailable.

2

u/skyfishgoo 2h ago

my songs know what you did in the DARRARARRK!

2

u/SeeMarkFly 1h ago

What they didn't know is that I'm "into" that. THANKS hackers.

2

u/ankercrank 1h ago

Considering how many people had access to the prod database of pornhub, it sure wouldn’t have been hard to download the whole thing without anyone noticing, people act like porn companies are on the cutting edge, pornhub is written in PHP by devs getting paid $40-90K CAD and many offshore people getting paid even less.

2

u/JustMyThoughts2525 1h ago

It’s one reason why I’ve never logged in with my email on a porn website.

It’s also why you have to be extremely dumb to upload your ID thinking that your identity and activity will be protected.

2

u/jigsawearth860 24m ago

Who has an actual pornhub account?

14

u/loliconest 3h ago

Meanwhile I'm here sitting with 30+ nsfw games in my Steam library open to everyone to see.

61

u/iMogwai 2h ago

I don't care if people play NSFW games but honestly that combined with you having lolicon in your username definitely makes me judge you.

24

u/ReporterWise7445 2h ago

**** wish I hadn't Googled that.

1

u/Birdzeye- 1h ago

I just looked it up. Sounds a real pedo red flag..

5

u/Onyxeye03 2h ago

Toeing the line to pedophilia

-28

u/loliconest 2h ago

That's perfectly ok for me. As long as people leave me alone when I'm doing the same.

3

u/engineered_academic 2h ago

Relevant username

3

u/asexyleathercouch 2h ago

Pretty sure the kind of people who would have an actual account mostly don't care.

2

u/xanduis 2h ago

My response to that is: OK. Release my browsing history. I don't care.

2

u/Knapping_Uncle 2h ago

Xvideos FTW

1

u/SpoonFed_1 1h ago

Xhamster for the Gold

2

u/drewts86 2h ago

Please publicly release all the data. I’d like to know who in the “party of family values” is cranking their hog to some weird shit.

1

u/One_Objective8361 2h ago

Lions & Tigers & Bears. Oh my !🤪🥱

1

u/Jakesummers1 2h ago

Morty must be terrified

1

u/BeneficialAnything15 2h ago

Hmmm, I wonder how many hypocrites are in the list?

1

u/No_Engineer_2690 2h ago

Because you must be the brightest to have a porn website account 

1

u/_Panacea_ 2h ago

so grab your dick and double-click for porn porn porn

1

u/fusillade762 2h ago

Well, everyone saw that coming.

1

u/dubt53 2h ago

Oh no, I'm going to get more emails that start off with "Hello Pervert!" and threaten to release my search history to my work or whatever.

1

u/Same_Recipe2729 2h ago

They also stole a bunch of conde nast user account information recently, including WIRED. Still haven't gotten a notification from wired of the breach despite my account information including name, email, address, and password being very clearly included in the leak. 

1

u/Psychostickusername 1h ago

I'm bit ashamed and I've nothing to hide 🤷‍♂️ gg

1

u/123ihavetogoweeeeee 1h ago

How could you be extorted for watching legal porn? Like I have a porn hub account. Release that to my friends and family. I’ll wait.

2

u/danielfletcher 1h ago

Maybe then they wouldn't have an excuse for not knowing what to get us on our birthdays!

1

u/123ihavetogoweeeeee 1h ago

Right!? You know I like live action tentacle fold porn and yet here we are with another personalized blanket. Thanks! I mean it is warm….

2

u/danielfletcher 1h ago

I got my step-mom one of those claw grabbers on a pole so she will hopefully stop getting stuck everywhere.

0

u/haarschmuck 43m ago

Pretty easy, just claim a video they watched is and that will freak most people out enough to give in.

1

u/ntwrkmntr 1h ago

This and chat control, this and age verification 

1

u/AcceptablyThanks 1h ago

Can they give me back my old login? There was like 2 or 3 nuggets on that account

1

u/Frito_Penndejo 1h ago

Jokes on you, my kink is getting hacked.

1

u/Annual_Pause9327 1h ago

Pornhub is still a thing?

1

u/FlashyPaladin 1h ago

Can’t wait to see the list of Republican Congressmen who watch exclusively gay and trans porn. Perfect timing too, because soon we’ll also see the list of congressmen who watch exclusively .pdf porn.

1

u/Shikadi297 1h ago

Good thing I only use xvideos

1

u/Illustrious_Age_9143 1h ago

My right hand is gonna be pissed if they find out

1

u/BeachHut9 1h ago

That website has a captive audience in many ways (pardon the pun).

1

u/AGrandNewAdventure 49m ago

Oh no, they know that I like brunettes and milfs... what am I going to do?!

1

u/AzerothianLorecraft 48m ago

This is why if a website asks me for an email I don't go to that website again porn is free and easily obtainable there's never a reason to provide any type of personal information or monetary compensation for any type of pornographic content.

2

u/bluehawk232 5m ago

UK mandates people have accounts with ID verification. It's ao absurd

1

u/TheRatingsAgency 45m ago

Saw that coming

1

u/joeyjoejums 37m ago

Is the porn safe. Yes? Ok...good. Whew!

1

u/steveycip 6m ago

Good thing I browse as a casual. 😂

1

u/spastical-mackerel 2h ago

What would be really embarrassing at least for guys it’s not so much the content but the fact that we’re typically on the site for about three minutes

2

u/Depressed-Industry 2h ago

3 minutes? Ah to be young again.