Carnival confirms data breach impacting nearly 6 million
2026-05-29T08:51:56Z•ca87f183ba743fb2eb59a6222455b259e708333647dbcf03ff4745616cbe2afa
CISA KEVChatGPT scamChromeClickFixDeno RATFox TempestGhost CMSGitHubKali365MFA bypassMicrosoft DefenderNYC Health + HospitalsRCESecure Boot/Windows deadline (June 2026)ShinyHuntersSourceForgebrowser vulnerabilitiescredential theftdata breachfake downloadshealthcare breachmalwaremalware signing fraudphishingweb compromise
What happened
Malwarebytes Labs round-up (May 2026) covering multiple high-impact incidents: Carnival confirmed a ShinyHunters data breach affecting nearly 6 million people; NYC Health + Hospitals exposed biometric, medical and financial records for ~1.8M via a third‑party vendor compromise. Several active threats and campaigns are reported: a fake ChatGPT download site distributing malware to Windows and macOS, fake installers on GitHub/SourceForge distributing Deno RAT, a huge ClickFix campaign abusing a Ghost CMS flaw to push malicious Cloudflare verification pages, and a Kali365 phishing kit that bypass
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- ca87f183ba743fb2eb59a6222455b259e708333647dbcf03ff4745616cbe2afa
- Enrichment time
- 2026-05-29T08:51:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.