Skip to content
Leak site of spacebears, captured by ThreatCluster

spacebears

Active

25 tracked victims · First seen Apr 25, 2024 · Last seen Sep 23, 2026

About

Aggregated threat-intel description

Space Bears is a double-extortion ransomware group that emerged in April 2024, distinguished by a professional "corporate" aesthetic on its leak site, leveraging Phobos RaaS infrastructure and targeting small-to-medium organizations in manufacturing, technology, and healthcare across the US and Europe.

Sectors: Technology, Healthcare, Manufacturing · Countries: US, IT, DE

Recent victims

View all →
VictimSectorCountryDataViewsPostedStatus
Tomix / Grupo JOPERAgricultural machineryPT——Sep 23, 2026
D-MAX Engineering, Inc
dmaxinc.com
Environmental consultingUnited States—10,802Sep 5, 2026published
Sports Endeavors
sportsendeavors.com
Retail / Sporting goodsUnited States—10,894Sep 4, 2026published
Schwartz, Giannini, Lantsberger & Adamson (SGLA)
sglacpas.com
AccountingUnited States—592Sep 4, 2026published
Studio Oculistico Ciraci
oculisticaciraci.it
Healthcare / OphthalmologyItaly—21,281Sep 3, 2026published
holzmarkt chemnitz
holzmarkt-chemnitz.de
Retail / Building materials and wood productsGermany—16,638Aug 22, 2026published
Freelom
freelom.cz
Internet service provider / ITCzech Republic—17,536Aug 22, 2026published
SEARS (Grupo Sanborns)
sears.com.mx
RetailMexico—18,962Aug 15, 2026published
Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano
oliobasso.com
Olive oil and wine productionItaly—14,718Aug 12, 2026published
Elixi International SA
elixi-int.com
Pharmaceutical distributionSwitzerland—15,528Aug 10, 2026published
Hitech Distribuzione Informatica S.r.l. (HTDI)
htdi.it
IT solutionsItaly—19,672Aug 7, 2026published
PontoBR Sistemas
pontobrsistemas.com.br
IT / Call center technologiesBrazil—23,598Aug 5, 2026published
StellarRAD SystemsTechnologyUS——Jul 29, 2026listed
DoAllTech
doalltech.com
Construction ITKR—23,027Jul 21, 2026published
Anpra SAS
anpra.co
Auto parts distributionColombia—25,192Jul 21, 2026published
BiesSse Group
biessseworld.com
Adhesive tape manufacturingAustria, Brazil, China and Mexico—21,607Jul 21, 2026published
Techpol-System
techpolsystem.pl
Engineering / industrial power solutionsPoland—22,636Jul 13, 2026published
Turbosoft
turbosoft.cm
IT design and management systemsCameroon—21,511Jul 13, 2026published
BiessseAdhesivesIT——Jul 8, 2026
Fitcrunch
fitcrunch.com
Food / Nutritional supplementsUnited States—25,846Jul 7, 2026published
Blenheim
blenheim.co.uk
Luxury propertyUnited Kingdom500 GB24,717Jul 6, 2026published
Salters propane
salterspropane.com
Propane retailerUS—29,986Jul 2, 2026published
Chebib Control
chebib.com.br
Hospitality management systems / automationBrazil—28,329Jun 17, 2026published
Gerencial
gerencialcontabil.com.br
accounting & advisoryBrazil—19,930Jun 17, 2026published
ECOVACS
ecovacs.com
Robotics / Consumer electronicsChinaAbout 2 TB of stolen data.31,360Jun 16, 2026published

Found by ThreatCluster

41 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

Salter’s Propane
salterspropane.com · Propane distribution
Oct 3, 2026
Basso Fedele & Figli S.r.l.
oliobasso.com · Olive oil sector
Oct 2, 2026
The BiesSse Group
biessseworld.com · production and conversion of highly performing technical adhesive tapes
Oct 1, 2026
Gerencial Contábil (Gerencial)
gerencialcontabil.com.br · accounting and business advisory · 600,000 files
Oct 1, 2026
Tomix
tomix.com.pt · Crop-protection equipment manufacturing
Sep 30, 2026
Gerencial Contábil (Gerencial PR)
gerencialcontabil.com.br · Accounting and business advisory · 600,000 files
Sep 24, 2026
Tomix – Indústria de Equipamentos Agrícolas e Industriais, Lda.
tomix.com.pt · Agricultural equipment manufacturing
Sep 24, 2026
D‑MAX Engineering, Inc
dmaxinc.com · Environmental consulting
Sep 24, 2026
BASE S.p.A.
Sep 2, 2026
holzmarkt-chemnitz
holzmarkt-chemnitz.de · Retail (building materials)
Aug 31, 2026
Basso Fedele & Figli S.r.l. / Villa Raiano
oliobasso.com
Aug 30, 2026
Gerencial Contábil
gerencialcontabil.com.br · Accounting and business advisory · 600,000 files
Aug 30, 2026

All ransomware groups · Dark web intelligence