joshua

Profile narrative

The threat actor known by the alias joshua operates from Brazil and is publicly linked to the Fatal Error Crew hacking collective. This alias appeared in connection with a data leak involving the Brazilian division of an international fashion retailer, where the actor claimed responsibility for exposing customer information. The actor’s association with Fatal Error Crew suggests participation in a loosely organized criminal consortium rather than a state‑sponsored effort. No further personal details, such as real name or additional aliases, are available in the open sources.

The actor’s known activity targets the retail sector in Brazil, specifically the gift‑card platform of a multinational clothing chain. The compromise resulted in the exposure of identification numbers, email addresses, gift‑card values, order details and purchase information for roughly thirty‑six thousand customers. According to reporting, the breach was carried out in retaliation for the retailer’s alleged misuse of jobseeker data to meet gift‑card production quotas, indicating a motive rooted in perceived grievance rather than financial gain or espionage. The leaked data was published on Pastebin, a platform commonly used by threat actors to share stolen information.

Attribution to the Fatal Error Crew group is the only publicly established affiliation for joshua, with no evidence of state nexus or ties to larger cybercrime syndicates. The incident represents the sole publicly reported operation attributed to this actor, and no specific malware families, initial‑access vectors or tooling styles have been disclosed in the available sources. Following the leak, the retailer confirmed detecting unauthorized activity, activated contingency measures and initiated legal proceedings while denying any unauthorized use of personal data. This case remains the primary reference point for understanding the actor’s tactics and impact.

Incidents

Attributed incidents are available to members.