BreachesJun 10, 2026
🚨🇧🇷 A threat actor known as devockka is advertising a dataset allegedly tied to CBCO Hospital...
Devockka threat actor advertises dataset allegedly from Brazil's CBCO Hospital.
Vendor Watch
Run Vision One?
Get an email when a reviewed story names Vision One, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works
Summary
A threat actor named devockka is reportedly selling a dataset allegedly stolen from CBCO Hospital de Olhos, an eye hospital in Goiânia, Brazil, which is part of the Vision One hospital network. The actor claims the exfiltrated data includes administrative logins, WordPress credentials, and CPFs (Brazilian individual taxpayer registry numbers).
Indicators of Compromise
- domain — cbco.com.br
Entities
devockka (threat_actor)WordPress (product)Vision One (vendor)