THREATNOIR
Subscribe
Back to Feed
BreachesJun 8, 2026

🚨🇨🇴 A threat actor known as Sorb is selling a dataset allegedly tied to Farmanorte (https://t....

Threat actor Sorb is selling a dataset allegedly from Colombian pharmacy chain Farmanorte.

Read at source
Vendor Watch

Run Farmanorte?

Get an email when a reviewed story names Farmanorte, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works

Summary

A threat actor named Sorb is reportedly selling a large dataset of customer information allegedly stolen from Farmanorte, a major pharmacy chain in Colombia. The actor claims the dataset contains approximately 32.5 million lines of CRM data, totaling 23 GB, which would impact around 3.2 million individuals.

Indicators of Compromise

  • url — https://t.co/AcMLO63g6f
  • url — https://t.co/42AjS1DGSS

Entities

Sorb (threat_actor)Farmanorte (vendor)