From pr0n to playlists and paperclips, trio of breaches spills data of millions

Three very different companies have now confirmed data breaches affecting millions of users – each insisting the damage stopped well short of passwords and payment details. Pornhub has told Premium subscribers that some user data was exposed after a breach at Mixpanel, a third-party analytics provider it once used, rather than through any compromise of Pornhub's own systems. In a notice to users, the adult site said the incident affected "only select Premium users" and involved a limited set of analytics events inside Mixpanel's environment. Pornhub stressed that passwords, credentials, payment details, and government IDs were not exposed, and noted it stopped working with Mixpanel in 2021 but was informed of the breach by the vendor. The disclosure follows a similar incident last week affecting OpenAI, which traced a leak of internal data to compromised Mixpanel analytics credentials. SoundCloud has also confirmed it was breached after a week of user complaints about outages and broken access, which the company now says were linked to a cybersecurity incident. The streaming platform said it detected unauthorized activity in an ancillary service dashboard and brought in third-party security experts to investigate, eventually determining that the exposure affected roughly 20 percent of users. According to public data, SoundCloud has approximately 140 million users, suggesting that some 28 million people have likely been affected by the breach. According to SoundCloud, the data...