We're loading the full news article for you. This includes the article content, images, author information, and related articles.
**The private viewing and search histories of select Pornhub Premium members have been compromised after a breach at a third-party firm, raising urgent questions about digital privacy for users worldwide, including in Kenya.**

A notorious hacker group is holding the private viewing habits of Pornhub's paying members for ransom, a brazen move sending shockwaves through the global digital privacy landscape. The group, known as ShinyHunters, is threatening to publish the sensitive data unless an unspecified payment in Bitcoin is made, according to reports.
This incident serves as a stark reminder to Kenyan internet users about the fragility of personal data online. As our economy digitizes, from banking to social media, the information we entrust to companies can become vulnerable, not through their own direct failures, but through the vast network of third-party vendors they rely on for services like data analytics.
Pornhub confirmed that data from some of its Premium users was affected but emphasized the breach did not occur on its own servers. Instead, the vulnerability was traced to Mixpanel, a data analytics provider the company stopped using in 2021. This detail suggests the compromised information is several years old, a fact confirmed by several affected users who were contacted by news agency Reuters.
While financial details and passwords remain secure, the stolen data is intensely personal. ShinyHunters claims to possess over 200 million records, which reportedly include:
There is some dispute over the breach's origin. While Pornhub and the hackers pointed to a November 2025 incident at Mixpanel, the analytics firm has denied this, stating it can find no evidence linking the stolen data to that event. Mixpanel suggested the data was last accessed by a legitimate employee account at Pornhub's parent company in 2023.
The ShinyHunters group is well-established, linked to a series of high-profile hacks and extortion attempts against major companies like Salesforce and Ticketmaster. Their strategy of public extortion highlights a dangerous trend in cybercrime that directly impacts user trust.
This breach lands at a critical time for Kenya, which has seen a massive surge in cyber threats. The Communications Authority of Kenya (CA) reported a staggering 4.5 billion cyber threat events between April and June 2025 alone, an 80.7% jump from the previous quarter. With Kenya's Data Protection Act of 2019 now in full effect, the responsibility of data controllers and processors to secure user information—even when held by third parties—is legally mandated.
As global platforms face increasing pressure to verify user ages, potentially requiring government IDs, the stakes for data security have never been higher. This incident underscores the profound truth of our digital age: the security of your most private information is only as strong as the weakest link in the chain.
Keep the conversation in one place—threads here stay linked to the story and in the forums.
Other hot threads
E-sports and Gaming Community in Kenya
Active 7 months ago
Popular Recreational Activities Across Counties
Active 7 months ago
The Role of Technology in Modern Agriculture (AgriTech)
Active 7 months ago
Investing in Youth Sports Development Programs
Active 7 months ago