Back to all incidents

SOCOCO

sococo.com
EMERGING

SOCOCO was listed on the UmBra ransomware extortion leak portal. SOCOCO — A Brazilian mid-sized food company with 40 employees, blending tradition and modern marketing through WordPress-driven platforms.

Observable Status EMERGING
Industry / Sector Technology
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor UmBra
Affected Population 40 records
First Seen 2026-10-08
Last Updated 2026-10-08
Authentication Credentials
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

14% CONFIDENCE
1. Primary Authority UNVERIFIED CLAIM Base weight: 6%
2. Evidence Specificity +11% Domain & Scope Telemetry
3. Corroboration Curve +0% 1 independent domain
4. Timeline & Staleness -3% 1 milestone logged
Corroborated Source Domains:
ransomware.live

Technical Forensic Briefing

Incident Overview

SOCOCO, operating within the Technology sector, has been subject to a cybersecurity incident initially observed on 2026-10-08. Ground-truth telemetry indicates the threat activity is attributed to threat actor UmBra.

SOCOCO was listed on the UmBra ransomware extortion leak portal. SOCOCO — A Brazilian mid-sized food company with 40 employees, blending tradition and modern marketing through WordPress-driven platforms.

Compromised Assets & Data Scope

Current disclosures quantify the affected population at approximately 40 records/individuals. Primary affected online infrastructure and perimeter domains include sococo.com.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Authoritative Directives & Vendor Disclosures

  • Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.

Milestone Timeline (1 events logged)

2026-10-08 21:36 UTC
UNVERIFIED CLAIM

SOCOCO Listed on UmBra Ransomware Extortion Portal

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub