Welcome to DBD. On March 8th 2026, DBD celebrated it's sixth anniversary and 
Dentons Senior Analyst, Washington D.C.
Welcome to this week's Data Breaches Digest, a catalogue of links concerning Data Breaches and Cyber Security that were published on the Internet during the period between 1st June and 7th June 2026.1st June
32 Million Bumble users’ data leaked online, hackers claim
145 AI laws passed in 2025 and privacy teams aren’t catching a break
AI SOCs Will Still Need SOC Analysts, Security Vendors Say
Another South African organisation denies a major data breach
Atlas Menu Data Breach Exposes Approximately 64,000 User Accounts
Attackers Abuse Shared Content for ChatGPT Phishing Campaign
Brute-force attack triggers Dashlane account lockouts
California Attorney General files lawsuit against 23andMe for data breach
Carnival customer information, including passport details, impacted by data breach, cruise line says
Carnival warns nearly 6 million people of potential data breach
ChatGPhish Technique Shows How Browser Prompt Injection Can Manipulate ChatGPT Summaries
China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan
Chrome now protects you from hackers who steal browser cookies - how it works
Critical Flowise Flaw Gives Attackers Full Server Control
Critical Magento Cache Plugin Flaw Enables Remote Code Execution
Critical Windows Netlogon RCE flaw now exploited in attacks
Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts
Cybercriminals Leverage GHOSTYNETWORKS and OMEGATECH for JS Malware Hosting
Dashlane suspends multiple accounts after ‘brute force’ cyber attack
Data Breach Affects Thousands of Melbourne Film Festival Customers
Data discovery gaps that catch enterprises off guard
Deepfake CEOs, fake suppliers, AI phishing: Scams United Arab Emirates (UAE) businesses need to watch out for
EU organizations buckle under rising compliance pressure
FBI Warns Microsoft Users as Kali365 Attack Spreads Across Outlook and Teams
Federal Trade Commission (FTC) Warns About Digital Invite Phishing Scam
Film festival hack leaves thousands fearing identity theft
FSB Group Gamaredon Hides Worm in Windows Data Streams
Gamaredon APT Hides Malware in Windows Features, Uses Cloud C2
German tax authority may train AI on citizens’ unaltered data
Grand Theft Auto 6 (GTA 6) Hype Fuels Surge in Phishing Scams and Malware Campaigns
Hacker arrested in Granada after leaking personal data of state officials
Hackers are exploiting Palo Alto GlobalProtect VPN authentication bypass (CVE-2026-0257)
Hackers Attacking Signal Users to Steal Backups in New Wave of Attacks
Hackers breach Obama White House Instagram years after it went silent
Hackers Target Signal Users in Phishing Campaign to Steal Backup Recovery Keys
Hackers Target Signal Users to Steal Backups in New Attack Wave
How NIST fumbled management of the National Vulnerability Database
India: Bombay High Court Blocks Ransomware Group ‘Morpheus’ After Massive 680 GB HDFC Asset Management Company (AMC) Data Theft
India: Central Board of Secondary Education (CBSE) admits security flaws after teen hacker exposes class 12 data risk
India: Central Board of Secondary Education (CBSE) Admits Vulnerabilities in Evaluation System After Teen Hacker's Findings
India: Central Board of Secondary Education (CBSE) admits vulnerabilities in OnMark portal amid answer sheet mismatch allegations; Congress calls it a massive data breach
India: Central Board of Secondary Education (CBSE) data security under scanner after hacker claims access to answer sheets
India: Central Board of Secondary Education (CBSE) Engages IIT Experts After Admitting OSM Security Vulnerabilities
India: Delhi High Court Says Banks Not Automatically Liable When Customers Click Phishing Links
Instagram Meta AI Flaw Allegedly Enables Account Password Resets
Iran-Linked Hackers Wipe IT Systems and Backups in Middle East Cyberattack
Logistics giant suffers massive 840-million-record data breach
Luxembourg holidaymakers falling victim to phishing scams
Massive 17-Million Device Botnet in the Netherlands Dismantled in a Police and NCSC Joint Operation
Medical Billing Company Data Breach Affects 7 Medical Groups
Melbourne International Film Festival customers' data leaked via Ferve platform
Microsoft says it will not pursue security researchers after zero-day backlash
Nearly 60 Lakh Passenger Records Exposed in Carnival’s Massive Data Breach
New ChatGPhish Technique Uses Prompt Injection to Manipulate ChatGPT Responses
New DriveSurge Campaign Delivers Malware Through ClickFix Lures
North Carolina man jailed for selling US senior citizens’ data to Jamaican scammers
North Korean hackers target macOS users with advanced malware campaign
OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack
Palo Alto Warns High-Severity Bug Is Being Actively Exploited
Phishing Scams: How to Spot and Avoid Them
Stealer Malware Surges as AsyncRAT, DCRat Lead Weekly Uploads
The biggest cybersecurity threats businesses are facing this year
The Gentlemen ransomware combines advanced encryption with self-propagation, targeting critical sectors
Threat Actors Abuse ChatGPT Chats to Host Fake Outage Page, Deliver Malware
Threat Actors Linked to Iran Leverage AppDomainManager to Evade Detection
Unknown hacker group targeted Russian maritime universities, diplomats for nearly two years
VSP Solutions responding to Stormous ransomware attack
WhatsApp: How to protect your account from hackers
Windows Netlogon 0-Click RCE Flaw Exploited in the Wild
Zero-Click pretalx XSS Flaw Lets Hackers Hijack Conference Organizer Accounts
Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 18th May and 24th May 2026, kindly assisted by our partners.
