BreachesMay 25, 2026
🚨 A threat actor going by Sorb is selling an alleged user database of Bimetica (https://t.co/Q4M...
Threat actor Sorb claims to be selling database of 157,000 Bimetica users on cybercrime forum.
Vendor Watch
Run Bimetica?
Get an email when a reviewed story names Bimetica, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works
Summary
A threat actor using the alias Sorb is allegedly selling a stolen user database from Bimetica, a BIM (Building Information Modeling) objects platform, on a popular cybercrime forum. The claimed breach affects approximately 157,000 users across Europe. The incident highlights ongoing risks to SaaS platforms and their user data exposure.
Indicators of Compromise
- domain — bimetica.com
Entities
Sorb (threat_actor)Bimetica (product)