internet Age Verification

Pornhub writes:

Overview.

A recent cybersecurity incident involving data from a third-party data analytics service provider has impacted some Pornhub Premium users. Specifically, this situation affects only select Premium users. It is important to note this was not a breach of Pornhub Premium's systems. Passwords, payment details, and financial information remain secure and were not exposed.

What Happened.

We recently learned that an unauthorized party gained unauthorized access to analytics data stored with Mixpanel, a third-party data analytics service provider. The unauthorized party was able to use this unauthorized access to extract a limited set of analytics events for some users. This was not a breach of Pornhub Premium's systems. No passwords, credentials, payment details or government IDs were compromised or exposed and we have since secured the affected account and stopped the unauthorized access.

Potential User Contact. We are aware that the individuals responsible for this incident have threatened to contact impacted Pornhub Premium users directly. You may therefore receive emails claiming they have your personal information. As a reminder, we will never ask for your password or payment information by email.

What We Are Doing.

Upon becoming aware of this event, we immediately launched a comprehensive internal investigation with the support of our cybersecurity experts. We have engaged with relevant authorities and with Mixpanel so that we can provide you with facts. We are working diligently to determine the nature and scope of the reported incident.

What You Can Do.

While our investigation is ongoing, we encourage all users to remain vigilant by monitoring their accounts for any suspicious emails or unusual activity.

The government of Spanish Prime Minister Pedro Sánchez intends to implement age verification to access adult content on the internet across the board to prevent minors from viewing age-restricted websites. Spain's data regulator Agencia Española de Protección de Datos (AEPD) is developing a process to require web users to utilize a digital ID card.

The Royal Spanish Mint will be directed to develop the digital ID technology following recommendations from the AEPD. One format floated by the agency is that a user will download an app on their mobile device, a QR code, or some other type of digital document verifying their age through a government ID, health or residence cards, a driver's license, or a passport. AEPD claims that this approach minimizes risks of a data breach since third parties--such as a private sector age verification software vendor or a regulated platform--will not be able to access a user's sensitive personally identifiable information.

Unfortunately, there is no guarantee of sensitive personally identifiable information being safe in the hands of a government agency or private company. Consider a case that occurred in Louisiana, which was the first U.S. state to require an ID to view adult content. Seeking to comply with the law, the tube site Pornhub adopted an age verification solution that integrated with the state's digital identification app, LA Wallet.

Months after the deployment of LA Wallet by Pornhub, the company and the agency administering the digital wallet program were victims of a data breach. A local news report indicates that over 6 million records from the Louisiana Office of Motor Vehicles were exposed by hackers in June 2023. Names, addresses, ID numbers, social security numbers, height, weight and eye colors were exposed in a breach of a file transfer protocol.

Even with the best intention and risk mitigation, AEPD will not be able to completely prevent a breach of data. That is one major concern among critics of age verification.

A Canadian Senate committee amending the Liberal government's controversial Bill C-11 has added the requirement for online platforms to verify the age/identity of users accessing pornography, a move internet law experts say is likely unconstitutional.

Sen. Julie Miville-Dechene proposed the amendment, stating that online undertakings shall implement methods such as age-verification methods to prevent children from accessing programs on the internet that are devoted to depicting, for a sexual purpose, explicit sexual activity.

The committee passed the amendment, with seven senators voting in favour, five opposing it and two abstaining.

The amended version of the legislation must be approved by the full Senate and then go back to the House of Commons before it becomes law. #

It if does pass into law, it would be up to the CRTC to decide how to implement the age verification requirement.