HvcKMvsoneria33
HvcKMvsoneria33 is an alias or username associated in open-source sources with the BlackHex Brotherhood and attacks against Venezuelan entities. Attributions by victim are treated as unverified claims unless an independent source is available.
- Incidents
- 7
- High impact
- 1
- First seen
- Oct 1, 2025
- Latest seen
- Jun 14, 2026
Linked incidents
HvcKMvsoneria33 alleges a breach of Bolívar’s tax system / Heres City Hall (SAMATH)
On June 14, 2026, a public account associated with BlackHexBrotherHood/HvcKMvsoneria33 claimed to have compromised the Bolívar state tax administration system at the Heres City Hall, affecting 68.5k users, 52k vehicle records, and 129k tax payment records. The record maintains a connection to SAMATH/Heres due to the institutional context of municipal tax administration, but the public source does not explicitly mention samath.gob.ve and does not match the previously reported internal date of November 18, 2025. There is no official confirmation or independent verification of the alleged data.
HvcKMvsoneria33 calls for the publication of payroll databases from 31 Venezuelan state institutions
On November 26, 2025, a thread attributed to HvcKMvsoneria33 announced alleged payroll databases covering 31 Venezuelan government institutions, including PDVSA, SEBIN, the Office of the President, and CICPC. The publicly available evidence describes a single alleged multi-agency dataset, not separate breaches by agency. No official validation or confirmation of authenticity was found.
HvcKMvsoneria33 claims attack against the Venezuelan government (gob.ve / SEBIN)
On November 22, 2025, a threat actor known as HvcKMvsoneria33, associated with the BlackHex Brotherhood, claimed to have deleted or compromised Venezuelan government resources linked to gob.ve and displayed a visual reference to SEBIN. No independent confirmation of the impact was found, and the evidence does not support attributing the claim to SENIAT’s internal systems.
HvcKMvsoneria33 reports an attack on the Venezuelan platform Patria
On October 13, 2025, a threat actor known as HvcKMvsoneria33 claimed to be selling 30 million records allegedly extracted from the Venezuelan platform Patria (patria.org.ve) on DarkForums. The dataset, reportedly an 11.4 GB CSV file priced at $500, is said to contain sensitive personal information, including identification numbers, email addresses, phone numbers, full names, and genders. The incident was corroborated by dark web intelligence reports, although no official statement from the Venezuelan government has been released confirming the breach.
HvcKMvsoneria33 alleges a leak of Venezuelan military data
On October 11, 2025, a threat actor using the alias HvcKMvsoneria33 claimed on DarkForums to be sharing Venezuelan military data, described as 30,000 records plus 3,000 images containing identification numbers and email addresses. The available evidence supports the existence of a claim on the public forum, but does not confirm the authenticity, source, or integrity of the alleged data.
HvcKMvsoneria33 reports an attack on the Bolivarian National Police
On October 11, 2025, a threat actor using the alias HvcKMvsoneria33 claimed on DarkForums to have a database from the Bolivarian National Police, described in the thread title as containing 27,000 images with identification numbers and full names. The available evidence supports the existence of the claim but does not confirm the authenticity, source, or content of the alleged data.
HvcKMvsoneria33 alleges an attack on the Integrated Management System for Ecological Mining Development (SIGDME)
On October 1, 2025, the threat actor HvcKMvsoneria33 claimed to have leaked a database containing records of Venezuelan mining companies extracted from the Integrated System for the Management of Ecological Mining Development (SIGDME) portal. According to reports, the leaked data includes RIFs (tax identification numbers), email addresses, and phone numbers.