[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKmVsX-3VcDWsBVLuEkPwK3Jjd0O18MFXEK9jXY9-pS4":3},{"article":4,"iocs":36,"watch_terms":44,"solutions":45,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"cfee75ae-046f-4f44-8853-3c2c0c4b5f7d","Atlas Menu Data Breach Exposes 64,000 GTA V and CS2 Cheat Service Users","atlas-menu-data-breach-exposes-64-000-gta-v-and-cs2-cheat-service-users-743299","Atlas Menu Data Breach exposes 64,000 GTA V and CS2 cheat service users, leaking emails, IPs, support tickets and hashed passwords.","Atlas Menu, a cheat service for Grand Theft Auto V and Counter-Strike 2, was breached in May 2026, exposing 64,000 user accounts including emails, IP addresses, usernames, support tickets, and bcrypt-hashed passwords. The stolen database was published on GitHub by an anonymous hacker claiming retaliation against a suspected scammer. Affected users face risks from phishing, social engineering, credential stuffing, and doxing attacks within the gaming community.","Atlas Menu cheat service suffers data breach exposing 64,000 GTA V and CS2 users' credentials","https:\u002F\u002Fhackread.com\u002Fatlas-menu-data-breach-exposes-gta-v-cs2-cheat-users\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F06\u002Fover-63000-gamer-accounts-exposed-in-atlas-menu-cyberattack.jpg","2026-06-05T17:16:02+00:00","2026-06-05T18:00:11.872535+00:00",7,[17,20,22,24,27],{"name":18,"type":19},"Atlas Menu","product",{"name":21,"type":19},"Grand Theft Auto V",{"name":23,"type":19},"Counter-Strike 2",{"name":25,"type":26},"UpGuard","vendor",{"name":28,"type":29},"bcrypt hashing","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":30,"icon":32,"name":33,"slug":34},null,"Breaches","breaches",[],[37,41],{"type":38,"value":39,"context":40},"domain","atlasmenu.net","Official Atlas Menu website, went offline following the breach",{"type":38,"value":42,"context":43},"github.com","Platform where stolen database was publicly published by attacker",[25,18,21],{"controls":46,"vendors":128},[47,76,102],{"slug":48,"name":49,"problem":50,"products":51},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":77,"name":78,"problem":79,"products":80},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":98,"product_name":99,"url":100,"description":101},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"slug":103,"name":104,"problem":105,"products":106},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[107,115,123],{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":124,"product_name":125,"url":126,"description":127},"ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",[129],{"slug":130,"name":25,"logo_path":131,"roles":132},"upguard","\u002Fvendor-logos\u002Fupguard.png",[133],"reported_by",{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":144},"gaming-service-breach-exposes-64000-users-due-to-inadequate-data-security","Gaming Service Breach Exposes 64,000 Users Due to Inadequate Data Security","Atlas Menu's data breach demonstrates how inadequate data protection measures can expose sensitive user information including emails, IP addresses, and password hashes. The incident highlights the risks of storing comprehensive user data without proper security controls, especially for services operating in legal gray areas. When attackers published the database on GitHub, it created lasting exposure that puts users at risk of phishing, credential stuffing, and harassment campaigns within gaming communities.",[139,140,141,142,143],"CIS Control 3","CIS Control 6","NIST SP 800-53 AC-2","NIST SP 800-53 SC-28","GDPR Article 32",{"CIS Control 3":145,"CIS Control 6":146,"GDPR Article 32":147,"NIST SP 800-53 AC-2":148,"NIST SP 800-53 SC-28":149},"Data protection controls, including minimising and protecting stored user data, would reduce the impact of the Atlas Menu breach.","Access control limits who can reach the user database that was later published on GitHub.","Requires appropriate security for personal data such as emails, IP addresses and password hashes.","Account management helps ensure only authorised accounts can access production databases.","Encrypting data at rest reduces the harm if the database is copied."]