Carnival confirms data breach impacting nearly 6 million
2026-05-28T20:52:00Z•0202b2e74421c8755717ea889a53026a6bf267fc7a86f3cb19c1461c04394789
MFA-bypassactive-exploitationbrowser-vulnerabilitiescredential-theftdata-breachghost-cmsmalicious-signingmalwarephishingransomware-alternativesupply-chainweb-exploit
What happened
Malwarebytes Labs roundup (May 2026) highlighting multiple active incidents and trends: Carnival confirmed a data breach (ShinyHunters claim ~6M affected); NYC Health + Hospitals disclosed a major healthcare breach exposing biometrics, diagnoses and bank details (~1.8M); a fake ChatGPT download site distributes platform-specific malware for Windows and macOS; fake installers/plugins on GitHub and SourceForge deliver a Deno RAT; the Kali365 phishing kit bypasses MFA to steal Microsoft/Outlook/Teams/OneDrive credentials; phishers are abusing Adobe Target to track and redirect victims to real log
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 0202b2e74421c8755717ea889a53026a6bf267fc7a86f3cb19c1461c04394789
- Enrichment time
- 2026-05-28T20:52:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.