HackPurgatory

Hackpurgatory is assessed as a possible Spanish-speaking cybercrime-adjacent collective or community brand operating through a public website, Telegram presence, and open promotion of searchable “OSINT” or “breach lookup” style resources. Publicly accessible material does not support high-confidence classification as a mature intrusion group in the same sense as a ransomware program or a long-documented hacktivist collective. Rather, the current picture is that of a hybrid ecosystem node: part community branding layer, part tooling hub, and part amplification or networking surface.

Open-source material shows Hackpurgatory maintaining a public-facing site that frames itself as an ethical cybersecurity community while also exposing breach-search, endpoint, and lookup functionality. That tension matters analytically: the gap between public self-presentation and the operational implications of the exposed services suggests either reputational laundering, dual-use positioning, or a community that mixes legitimate curiosity with clearly risky or potentially abusive capabilities.

The strongest external linkage currently available is an observed association with broader Spanish-speaking cybercrime ecosystems discussed in public reporting and commentary, including overlap claims involving other channels and operators. Separately, the user-provided attribution notes a doxing event involving Chronus Team and Hackpurgatory against Héctor López / OIHEC. On present evidence, that event is best treated as a meaningful but still limited indicator of association rather than proof of a durable joint command structure.

Source handling inside this section: OSINT-derived statements are marked below as such. No direct HUMINT reporting is currently available for this actor in this specific profile. Reliability / credibility labels are applied only to preliminary intelligence statements, per current editorial rule.