Space Bears Ransomware Claims Comcast Data Theft via QuasarBreach

Feeds.Feedburner

Space Bears Ransomware Claims Comcast Data Theft via QuasarBreach

First seen 8 Dec 2025, 14:53 UTC • •53.7

Article Content

1 / 4

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

The Space Bears ransomware group has claimed responsibility for a data breach at Comcast, asserting that they obtained sensitive files through an attack on Quasar Inc. The group has threatened to publish the stolen data, alongside separate leaks from Quasar itself.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 217d ago How this analysis works

More articles in this cluster (3)

Threat Graph

9 entities, 14 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (4)

Data Breach
DDoS
Malware
Ransomware

Campaign (1)

QuasarBreach

Organization (2)

Comcast
Quasar Inc

Threat Actor (2)

Space Bears
Space Bears Ransomware Group

Relationships

Space Bears uses Data Breach
Space Bears uses DDoS
Space Bears uses Malware
Space Bears uses Ransomware
Space Bears Ransomware Group uses Data Breach
Space Bears Ransomware Group uses DDoS
Space Bears Ransomware Group uses Malware
Space Bears Ransomware Group uses Ransomware
QuasarBreach attributed to Space Bears
QuasarBreach attributed to Space Bears Ransomware Group
Space Bears targets Comcast
Space Bears targets Quasar Inc
Space Bears Ransomware Group targets Comcast
Space Bears Ransomware Group targets Quasar Inc

Following this threat?

Track Space Bears and Comcast in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploit in BeyondTrust Remote Support Disclosed BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE. The flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring credentials or user…

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…