Threat actor

freshtools

Freshtools is modeled as a marketplace or source for selling access to cPanel and webmail, not as a single individual or group. Observed sellers include seller271 and seller305.

Incidents: 1
High impact: 0
First seen: Mar 13, 2026
Latest seen: Mar 13, 2026

Top targets

Portillo Seguros: 1

Linked incidents

Leak of confidential information Mar 13, 2026

FreshTools lists cPanel/Webmail accounts assigned to Portillo Seguros

On March 13, 2026, a public post and the VECERT index showed an entry from FreshTools/freshtools regarding 7 cPanel/Webmail accounts attributed to Portillo Seguros. The public evidence documents the existence of the claim, not the authenticity of the credentials or a confirmed compromise.

Portillo Seguros