-
Canopy Brands
June 2, 2026
•
[ leak, manufacturing ]
Settra publicly listed canopybrands.us on June 26, 2026 and said it would publish the remaining data after releasing a sample. DataBreach.com indexed 12,130 structured records dated June 2 containing names, email addresses, and phone numbers. Canopy Brands is a Concord, North Carolina-based manufacturer and holding company for safety, access, mobility, and infrastructure-product businesses. No victim statement or independent reporting confirmed the initial access vector, encryption, or operational disruption.
-
C2M LLC d/b/a Click2Mail
June 2, 2026
•
[ financial, leak, technology ]
A Click2Mail customer reported that the company's online debit-card checkout process was hijacked on June 2 and again later in the summer, with payment-card information captured during checkout and subsequently associated with fraudulent use. Other customers also publicly reported card fraud following Click2Mail transactions. C2M LLC later filed a breach notice with the Vermont Attorney General on September 15 confirming exposure of financial account codes and credit and debit account information affecting at least seven Vermont residents. The regulatory filing confirms the data exposure but does not disclose the technical intrusion method, full compromise window, total victim count, or responsible actor.
-
Norsk Tipping AS
June 2, 2026
•
[ ddos, hack, technology ]
A DDoS attack against Norsk Tipping began shortly before 20:30 June 2 and intensified about 21:00, overloading gaming services, especially KongKasino. Telenor mitigated the traffic and the company said traffic normalized about 23:00. No customer-data breach was reported. The operator remains unidentified. Sabotage is inferred from deliberate service interference against a government-owned national gambling operator, not from a proven political or financial demand.
-
Edgewood Surgical Hospital
June 3, 2026
TheGentlemen listed Edgewood Surgical Hospital in early June 2026 and claimed theft of approximately 500 GB of patient medical and surgical information. DataBreach.com subsequently indexed 4,901 rows associated with the hospital. Public reporting did not document attacker-caused encryption or operational disruption.
-
PHOBS d.o.o.
June 3, 2026
•
[ hack, phishing, technology ]
On June 3, 2026, unauthorized actors accessed guest reservation data stored in the PHOBS reservation-management platform. PHOBS said approximately 100,000 booking records may have been affected, exposing information that could be used in targeted phishing and fraudulent payment messages, while payment-card data was not compromised.
-
Norsk Tipping AS
June 3, 2026
•
[ ddos, hack, technology ]
On June 3, after the previous evening's DDoS had been contained and service restored, Norsk Tipping experienced another traffic-flooding attack. Customers reported delays and failed access to some online games. The company confirmed restoration around 23:00, with no data compromise. The attacker was not identified. Sabotage is inferred from repeated efforts to obstruct this state-owned public gambling service.
-
States of Guernsey — Committee for Education, Sport & Culture
June 3, 2026
•
[ social, phishing, government ]
On June 3, an attacker obtained unauthorized access to a Guernsey education employee email account and used it to send a malicious link. The mailbox remained accessible to the intruder for approximately one month and contained information relating to 74 individuals. Officials confirmed the breach but reported no evidence of data exfiltration beyond the Education IT environment. Criminal and Financial are limited inferences from the phishing/credential-abuse pattern; no extortion or political objective was established. Mixed reflects both unauthorized viewing of stored information and fraudulent use of the official mailbox.
-
Urschel Laboratories, Inc.
June 4, 2026
DataBreach.com indexed 6,787 rows associated with Urschel Laboratories and dated the breach to June 4, 2026. The Play group listed Urschel Laboratories on its leak site on June 5. Public reporting did not establish the access vector or document encryption, system unavailability, or operational disruption.
-
Affected Hola Browser for Windows users
June 4, 2026
•
[ malware, technology ]
A localized compromise of Hola's software-distribution pipeline caused an undeclared XMRig cryptocurrency miner to be bundled with some Windows installations of Hola Browser. The miner was installed persistently on affected devices and used their processing resources to generate Monero. Hola estimated that approximately 0.1% of users were affected and reported no evidence that user data was accessed or stolen.
-
Undisclosed cryptocurrency software-development organization
June 4, 2026
In an early-2026 intrusion lasting approximately two weeks, JINX-0164 used a fraudulent LinkedIn business approach and a fake virtual-meeting website to induce a developer at an undisclosed cryptocurrency organization to install AUDIOFIX malware on a macOS device. The attackers stole credentials, accessed internal development systems and CI/CD secrets, moved laterally into code repositories, and modified internal source code in an attempt to compromise additional endpoints and steal cryptocurrency-wallet credentials. The specific victim and country were not disclosed.
-
Madison Square Garden Sports Corp.
June 5, 2026
•
[ social, hack, technology ]
ShinyHunters stated that it breached Madison Square Garden on 2026-06-05 by vishing a low-level employee and abusing Microsoft Entra password-reset access, after which it reached cloud applications including Salesforce. The group demanded payment and published approximately 45 GB of data on 2026-06-16. It claimed more than 26 million customer and corporate records, while later analysis identified 9,782,361 unique email addresses and 2,820,221 unique telephone numbers. Reviewed files included internal talent and risk-assessment records, customer correspondence, and employee material. Reviewed reporting did not confirm that facial-recognition images or payment data were included.
-
Undisclosed organizations in education, transportation, healthcare, and finance
June 5, 2026
•
[ ransomware, education, finance ]
Microsoft reported that The Gentlemen ransomware had affected organizations in the education, transportation, healthcare, and financial sectors across North America, South America, Europe, Africa, and Asia. The self-propagating Go-based encryptor could spread through Windows networks, encrypt local volumes and network shares, delete shadow copies, and leave ransom notes. Microsoft tracks the ransomware operators as Storm-2697, while affiliates conduct the intrusions. Exact victim identities, attack dates, disruption duration, and affected-system counts were not disclosed.
-
PT Tempo Inti Media Tbk
June 5, 2026
•
[ hack, ddos, technology ]
Beginning on 2026-06-05, unidentified attackers used bot-generated traffic in an intermittent DDoS attack against Tempo's news website, making it difficult for the public to access. Tempo recorded 24.9 million malicious requests through 2026-06-08, including 12.97 million during one reported two-hour surge. Tempo suspected the attack was intended to interfere with its journalism and may have followed a separate late-May compromise that temporarily unpublished corruption-related articles, but neither the connection nor the perpetrator was confirmed.
-
Wiese USA
June 5, 2026
•
[ leak, technology ]
Termite claimed Wiese USA on June 8, 2026, with threat-intelligence tracking estimating the underlying attack on June 5. DataBreach.com subsequently indexed 229,721 records containing personal information. Litigation filed after the June incident alleges theft and disclosure of personally identifiable information. No independently verified operational disruption has been established.
-
Access Dental & Orthodontics
June 5, 2026
•
[ ransomware, leak, healthcare ]
WorldLeaks listed Access Dental & Orthodontics on its leak site on June 5, 2026 and issued a countdown associated with its extortion claim. DataBreach.com later indexed 322,387 records containing personal and contact information. Access Dental operates a dental-services organization headquartered in Irving, Texas. No independently verified operational disruption has been established.
-
United Auto Supply
June 5, 2026
•
[ ransomware, leak, retail ]
WorldLeaks publicly listed United Auto Supply on June 5, 2026 as part of its data-theft extortion operation. Independent ransomware monitoring captured the same June 5 claim, and DataBreach.com subsequently indexed 826,018 records containing personal, contact, and vehicle information associated with the company. United Auto Supply has not publicly confirmed the incident, and no operational disruption has been independently established.
-
Undisclosed organization in Unit 42 Pink-related extortion investigation
June 5, 2026
•
[ ransomware, phishing, technology ]
Palo Alto Networks Unit 42 investigated an extortion case involving an unnamed organization. On June 1, 2026, an attacker renewed contact in an existing negotiation, supplied a new qTox identifier and a data-leak site associated with the Pink extortion brand, and referenced essentially the same information claimed taken in an earlier extortion notice. Unit 42 described the broader cluster using voice phishing and cloud-service data theft. The specific initial access, actual exfiltration, victim industry and country, and whether the original intruder was identical to the Pink contact were not established. Event date is a publication-date fallback, not a verified theft date.
-
Norsk Tipping AS
June 5, 2026
A third separately reported attack struck Norsk Tipping around noon June 5. Telenor blocked malicious DDoS traffic and online gaming services returned to normal that afternoon. The earlier June 2 and 3 waves had ended, establishing a new disruptive episode. No attacker, ransom demand, or data theft was reported. Sabotage is a contextual inference based on intentional denial of the state-owned operator's services.
-
Nexstar Media Group, Inc.
June 6, 2026
•
[ leak, technology ]
ShinyHunters claimed that it accessed Nexstar Media Group systems on June 6, 2026 and stole more than 1 million Salesforce records and additional internal corporate data. DataBreach.com subsequently indexed 103,128 rows. Nexstar stated that it was investigating reports of a potential IT security incident and that its operations were not disrupted. The company did not publicly confirm the actor's full claimed scope.
-
Strand Fitness Pty Ltd (North Shore)
June 6, 2026
•
[ leak, insider ]
Strand Fitness Pty Ltd confirmed a data breach affecting current and former members of its North Shore gym in Burdell. Queensland Police found gym member information on a USB drive during a police raid in late May 2026 and opened an investigation. Several police officers were among the affected members. Strand Fitness said the information varied by individual and may have included contact details, health information, identity documents, and payment information. The company contacted affected members, notified Queensland Police and the Office of the Australian Information Commissioner, and took additional steps to secure its systems. The breach did not affect the company's other locations. The date, method, duration, perpetrator, motive, and number of affected members were not reported.
