Claims and excluded records
Documentation preserved outside the main incident list and its statistics. A pending claim can be included if sufficient evidence emerges; an excluded record retains the explanation for its disposition.
74 records outside the main list
- Excluded / contextual 5 preserved sources
Compilación ULP atribuida a TerroahOver que menciona a Digitel, Royal e INTT
Multi-incident summary
VECERT explicitly describes a series of posts and ULP compilations associated with different services and dates, without a bounded common infection, account or acquisition. Retain it as aggregate context outside the incident count, without creating children or denying possible credential theft. Organizations are alleged service associations, not established institutional-intrusion victims.
- Excluded / contextual 2 preserved sources
Acciones no delimitadas contra CORPOELEC y CPNB atribuidas a BlackHex
Insufficient evidence
Editorial non-admission of this composite record: the notice supports a contextual DDoS allegation attributed to BlackHex against CORPOELEC and CPNB, but its two detections delimit neither one joint operation nor two independent episodes. The additional public review recovered no account resolving that event unit. Both references and the low-confidence claim are preserved; this decision finds neither falsity, duplication, a proven multi-event campaign nor absence of an attack.
- Excluded / contextual 4 preserved sources
Posible exposición de credenciales de Insopesca y SAREN atribuida a D1STRICT9619
Multi-incident summary
The notice presents Insopesca #15613 and SAREN #15610 as separate alerts within a multinational collection without delimiting a common operation. Retain it as an aggregate outside incident counts, without creating incidents for each alert, finding falsity, or assigning other targets’ DDoS claims to these credentials.
- Excluded / contextual 2 preserved sources
Referencia no verificable a información técnica de CANTV atribuida a TerroahOver
Insufficient evidence
The historical fragment of report #11026 names CANTV technical categories and boasts about its systems, but the readable material does not sufficiently state a concrete unauthorized access, attempt, extraction or malicious-disclosure activity. The NetUNO claim, shared alias and monitoring advice cannot fill that gap. Following focused searches and review of the preserved evidence, editorial non-admission is applied; the claim is not declared false. Current access controls limit rereading and are not by themselves the exclusion basis.
- Excluded / contextual 4 preserved sources
Señal no confirmada sobre la FVF
Insufficient evidence
Editorial non-admission after focused second review. The FVF-specific VECERT row supplies a domain, actor label and monitoring date within an unconfirmed preventive feed, without a specific malicious action or underlying event. A general suspected-exfiltration heading cannot make each row a data extraction. Preserve the signal, sources and history without asserting falsity, harmlessness or absence of activity. April’s declaration and later training do not establish this row’s content.
- Pending verification 2 preserved sources
Referencia no verificable a supuestos datos de la Universidad Bicentenaria de Aragua
Insufficient evidence
UBA/vansel case6368 metadata provides only title/alias/monitor date, no activityassertion or20Kcount. Deleted0xlpl0it post neither target nor author relationship reproduced. Narrative says onlyoneevidence although new contextualindex attached; no source sustains underlyingclaim. Pendinginsuff proposed; not false.
- Pending verification 3 preserved sources
Posible exposición de datos de participantes en vestado51.com
Insufficient evidence
Gangi privacy warning and self-test narrative are recoverable; later quotation attributes47000-IPleak to Proxy99 but simultaneously no visiblePII/IPdetails unconfirmed. Third-party acquisition/publication vs site design exposure not delimited. Need primary editorial investigation to resolve in-scope malicious allegation; no site/personal data probed.
- Excluded / contextual 10 preserved sources
Intentos de intrusión contra la FVF y negativa de filtración de datos
Multi-incident summary
Preserve FVF’s declaration as aggregate context: its reproduced full statement alleges repeated intrusion attempts over several weeks without delimiting one operation and denies compromised data. Attempts are within scope; exclusion from individual-event counting is based on plural scope, not lack of success, attribution, original story or forensics. A researcher offers an unverified accidental-exposure and responsible-disclosure account that does not refute all attempts. Do not manufacture children or import July actor attribution.
- Pending verification 2 preserved sources
Referencia no verificable al CPNB asociada a BlackHexBrotherHood
Insufficient evidence
El índice de VECERT conserva un nodo titulado CPNB Venezuela y etiquetas de reconocimiento/colección, pero no texto o artefacto que delimite una actividad maliciosa particular. Telegram sólo aporta una página de contacto y las búsquedas públicas no recuperaron contenido específico. Se propone mantener pendiente por insuficiencia de evidencia, sin declarar falsedad, duplicidad o actividad legítima y preservando la procedencia histórica.
- Pending verification 2 preserved sources
Presunto listado de siete cuentas cPanel de Portillo Seguros
Insufficient evidence
El nodo conservado sólo titula siete cuentas cPanel de Portillo Seguros; no se recuperó el texto que establezca divulgación, venta o acceso no autorizado. Se mantiene la referencia y su fecha como procedencia, fuera del conteo hasta recuperar un acto específico. Esta decisión no afirma que el reclamo sea falso.
- Excluded / contextual 2 preserved sources
Supuestas debilidades de seguridad en Banco Plaza atribuidas a Omoikane
Context outside the main scope
Las fuentes conservadas describen supuestas debilidades no especificadas de Banco Plaza, sin un acceso malicioso ni un intento concreto. Un reporte de vulnerabilidades sin actividad maliciosa descrita no cumple el alcance del registro. Se conserva fuera del listado principal con sus fuentes; la decisión no prueba falsedad.
- Excluded / contextual 4 preserved sources
Daños en subestaciones y cortes eléctricos en Caracas
Context outside the main scope
Physical damage and localized electricity cuts are documented. A cyber component is not established; the record is preserved as context outside the main registry.
- Excluded / contextual 6 preserved sources
Fuga de rutas BGP de CANTV (AS8048) con causa probablemente accidental
Context outside the main scope
The BGP route leak is documented, but the technical analyses favor routing-policy or configuration and convergence explanations without establishing malicious third-party activity. Interception, data theft and a deliberate attack are not demonstrated. The anomaly and its sources remain as technical context outside the main registry; an accidental cause is probable, not definitive.
- Pending verification 2 preserved sources
Referencia no verificable a un posible incidente de Digitel atribuido a SoftVoid
Insufficient evidence
El grafo público de VECERT sólo conserva el título «Venezuela Digitel», una fecha y su asociación con SoftVoid; no expone la publicación ni una afirmación específica de acceso no autorizado, datos, malware o interrupción deliberada. El artículo sobre Chronus no menciona este evento y las búsquedas acotadas no recuperaron contenido adicional. Se preserva como reclamo por revisar, sin declararlo falso.
- Pending verification 1 preserved source
Referencia no verificable a un posible incidente en gob.ve/SEBIN
Insufficient evidence
El expediente conserva una URL y metadatos históricos, pero no se recuperó contenido que permita verificar el objetivo y la actividad maliciosa alegada. Las fuentes de contexto y búsquedas públicas no aportan corroboración específica. Se mantiene como pendiente por insuficiencia de evidencia, sin declarar falsedad ni eliminar el registro.
- Pending verification 7 preserved sources
Caída de elpitazo.net y pérdida reportada de acceso al acervo alojado en Contabo
Insufficient evidence
La indisponibilidad de elpitazo.net y la pérdida de acceso a información alojada están documentadas, pero la declaración de primera parte sólo informa que el proveedor no aclaró la causa ni confirmó o negó un ataque. Las versiones secundarias plantean borrado y un posible ataque sin evidencia específica de actividad maliciosa de terceros. Se conserva pendiente de evidencia suficiente sobre la causa, sin declarar falso el evento ni eliminar su procedencia.
- Excluded / contextual 2 preserved sources
Presunta venta de datos del INEA
Insufficient evidence
The June 2025 INEA sale headline specifies neither the class or scope of data nor a delimited malicious act. Retain it without editorial admission for insufficient content, without requiring samples or victim confirmation, transferring the 2026 claim to 2025, or finding falsity.
- Excluded / contextual 8 preserved sources
Campaña de phishing contra usuarios de BDV y Patria atribuida a Los Ciberandinos
Multi-incident summary
The Los Ciberandinos operation summarizes multiple frauds or attempts without verifiable individual boundaries. Retained as operational context, not an additional incident.
- Excluded / contextual 2 preserved sources
Presunta filtración de datos de Credicard atribuida a frog
Insufficient evidence
Editorial non-admission of the November item as an additional incident. Its title attributes an alleged Credicard leak to frog, but does not link the original claim or distinguish its activity or corpus from the same publishers October item. Further research did not establish an additional event or continuity. Preserve it as excluded for insufficient evidence, without merging records, finding duplication or falsity, or making official confirmation or forensics universal conditions.
- Excluded / contextual 2 preserved sources
Presunta filtración de datos de Consorcio Credicard con origen no identificado
Insufficient evidence
Editorial non-admission of this item as an additional incident. The historical capture preserves a Credicard data-leak allegation, but its title and teaser do not delimit the activity or link the original announcement. Another November item from the same publisher names the same victim. The two publications establish neither separate events nor duplication. Further public research did not resolve that boundary. Preserve the allegation and evidence as excluded for insufficient evidence, without finding it false or requiring official confirmation, forensics or an identified actor.
- Excluded / contextual 1 preserved source
Error 500 aparente en el portal de Globovisión
Insufficient evidence
The Globovisión post asks about webpage trouble and its image shows HTTP 500. In this context it does not delimit an attributed malicious act; campaign hashtags are insufficient. Retain it without editorial admission, without establishing falsity or the cause of the failure.
- Pending verification 1 preserved source
Referencia no verificable a un supuesto ataque contra FOGADE
Insufficient evidence
El expediente conserva una URL y metadatos históricos, pero no se recuperó contenido que permita verificar el objetivo y la actividad maliciosa alegada. Las fuentes de contexto y búsquedas públicas no aportan corroboración específica. Se mantiene como pendiente por insuficiencia de evidencia, sin declarar falsedad ni eliminar el registro.
- Pending verification 1 preserved source
Referencia no verificable a un supuesto ataque contra la Embajada de Venezuela en Noruega
Insufficient evidence
El expediente conserva una URL y metadatos históricos, pero no se recuperó contenido que permita verificar el objetivo y la actividad maliciosa alegada. Las fuentes de contexto y búsquedas públicas no aportan corroboración específica. Se mantiene como pendiente por insuficiencia de evidencia, sin declarar falsedad ni eliminar el registro.
- Excluded / contextual 1 preserved source
Referencia al dominio de SAREN sin afirmación de ataque
No incident described
The post only mentions SAREN's domain and campaign hashtags. It describes no attack and provides no evidence of the target's condition.
- Pending verification 1 preserved source
Referencia no verificable a un posible incidente en Hidrolara
Insufficient evidence
Hidrolara source body and media cannot be recovered; snowflake only dates URL, and migration shell supports no victim/actor/data assertion. No current source specific claim admits event beyond historical cataloguing. Retain provenance but move to pending unless fresh corroboration resolves target/content.
- Excluded / contextual 1 preserved source
Aviso de mantenimiento de NIC.ve difundido por Cyber Hunters
Maintenance notice without incident evidence
The post shows a NIC.ve maintenance notice, without an explicit attack claim or independent evidence of a security incident.
- Excluded / contextual 3 preserved sources
Referencia al dominio de BANFANB sin afirmación de ataque
No incident described
The exact 17-August 2024 @White_Hunters post only publishes BANFANB’s domain and a generic GIF; it describes no attack, outage, unauthorized access or impact. An earlier Paginaweb.app assertion does not establish that this post describes an incident. The 3-August BANFANB record is related context, not a proven duplicate. The record and all its evidence remain outside the main count.
- Excluded / contextual 7 preserved sources
Ataques alegados contra el Consejo Federal de Gobierno
Multi-incident summary
The minister alleged Thursday and Friday attacks on CFG within an account of attacks on 126 platforms. Retain it as aggregate context outside incident counts: the packet does not delimit a CFG operation or continuity supporting one event count. The official statement is not rejected for missing forensics or a mechanism; neither two attacks nor falsity is inferred.
- Excluded / contextual 6 preserved sources
Mención del BCV en reportes agregados de ciberataques
Multi-incident summary
The ministerial statement named BCV within a national campaign involving multiple institutions without delimiting a BCV episode. Retain it as aggregate context; Banco de Venezuela is a different institution and its payment trouble is not assigned to BCV.
- Excluded / contextual 3 preserved sources
Presunto ataque contra PDVSA mencionado en una lista ministerial
Multi-incident summary
La mención de PDVSA procede de una lista ministerial agregada, sin sistema, acción, ventana de actividad o efecto específico que delimite un incidente propio. Se conserva como contexto y procedencia fuera del conteo, con el mismo criterio aplicado a la mención agregada del BCV. La exclusión no declara falsa la denuncia ni niega un posible ataque.