Alleged Leak of 557,892 Vivo Brazil Customer Accounts by V For Vendetta Cyber Team
Quick Facts
Brazil
Incident Overview
A threat actor operating under the handle VFVCT, with the individual attacker identified as D2VY from the V For Vendetta Cyber Team, has leaked 557,892 customer accounts allegedly belonging to Vivo Brazil, one of the country's largest telecommunications providers. The data was reportedly sourced from Brazil Telecom infrastructure and is available as a free download in CSV/LOG format.
The leaked dataset covers recent activity spanning from 2023 to 2026 and includes email addresses, phone numbers, and passwords for Vivo Brazil customer accounts. The inclusion of plaintext or cracked passwords alongside contact information makes this a particularly high-risk exposure, as affected accounts could be vulnerable to credential stuffing, account takeovers, and targeted phishing campaigns.
Redacted samples were posted in the listing to demonstrate the data's legitimacy. The listing was posted on March 6, 2026.
Compromised Data Categories
Claim URL - For Subscribers Only
The claim URL for this listing can be found on the Threat Feed or Ransomware Feed for subscribers.

