Ransom! Sicol (JUN-2026)

spacebears (SICOL) ransomware claim alleges that Sicol, a Brazilian debt collection, credit management, and sales services company, had employee and client personal information, financial documents, and other files exfiltrated via https://***.com.br/. The impacted country is #Brazil.

Incident Details

  • Victim: Sicol
  • Sector: Manufacturing
  • Country: BR
  • Actor: spacebears
  • Source: http://5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb4v6mf3ki2ovid.onion/companies/47/sicol
  • Discovered: 2026-06-04T05:30:53.759186+00:00
  • Published: 2026-06-02T00:00:00+00:00

Information

  • A Brazilian company specializing in debt collection, credit management, and sales services
  • Uses digital automation combined with humanized customer support to help businesses recover debts and optimize sales workflows
  • Personal information of employees and clients
  • Financial documents
  • Other files
  • https://***.com.br/

Disclaimer: This post is based on public claims made by the ransomware group "spacebears". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live