spacebears
First seen April 29, 2024Active160 claimed victims
The claims below are reproduced as posted by spacebears on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Space Bears is a double-extortion ransomware group that emerged in April 2024, distinguished by a professional "corporate" aesthetic on its leak site, leveraging Phobos RaaS infrastructure and targeting small-to-medium organizations in manufacturing, technology, and healthcare across the US and Europe.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| SGLA (Schwartz, Giannini, Lantsberger & Adamson) | October 22, 2026 | ransomware_live | — |
| Holistic Health Group, Inc. (d/b/a Suncrafted) | October 15, 2026 | ransomware_live | — |
| Alma Center Servizi Medicali S.r.l. | October 15, 2026 | ransomware_live | — |
| Tomix / Grupo JOPER | September 23, 2026 | ransomware_live | — |
| D-MAX Engineering, Inc | September 5, 2026 | ransomware_live | — |
| Sports Endeavors | September 4, 2026 | ransomware_live | — |
| Schwartz, Giannini, Lantsberger & Adamson (SGLA) | September 4, 2026 | ransomware_live | — |
| Studio Oculistico Ciraci | September 3, 2026 | ransomware_live | — |
| Freelom | August 22, 2026 | ransomware_live | — |
| holzmarkt chemnitz | August 22, 2026 | ransomware_live | — |
| SEARS (Grupo Sanborns) | August 15, 2026 | ransomware_live | — |
| Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano | August 12, 2026 | ransomware_live | — |
| Elixi International SA | August 10, 2026 | ransomware_live | — |
| Hitech Distribuzione Informatica S.r.l. (HTDI) | August 7, 2026 | ransomware_live | — |
| PontoBR Sistemas | August 5, 2026 | ransomware_live | — |
| StellarRAD Systems | July 29, 2026 | ransomware_live | — |
| BiesSse Group | July 21, 2026 | ransomware_live | — |
| Anpra SAS | July 21, 2026 | ransomware_live | — |
| DoAllTech | July 21, 2026 | ransomware_live | — |
| Salters propane | June 26, 2026 | ransomware_live | — |
| Fitcrunch | June 25, 2026 | ransomware_live | — |
| Turbosoft | June 25, 2026 | ransomware_live | — |
| Blenheim | June 15, 2026 | ransomware_live | — |
| Techpol-System | June 15, 2026 | ransomware_live | — |
| Chebib Control | June 14, 2026 | ransomware_live | — |
| Biessse | June 9, 2026 | ransomware_live | — |
| Sicol | June 2, 2026 | ransomware_live | — |
| ECOVACS | June 1, 2026 | ransomware_live | — |
| Stellar | May 31, 2026 | ransomware_live | — |
| BASE SPA | May 25, 2026 | ransomware_live | — |
| Gerencial | May 21, 2026 | ransomware_live | — |
| Hunter | May 19, 2026 | ransomware_live | — |
| Cattani | May 18, 2026 | ransomware_live | — |
| Filabé | May 13, 2026 | ransomware_live | — |
| Lösing Filtertechnik | May 13, 2026 | ransomware_live | — |
| Ridge Law Firm | May 12, 2026 | ransomware_live | — |
| Geske Haus- und Versorgungstechnik GmbH | May 7, 2026 | ransomware_live | — |
| Gestordes | May 3, 2026 | ransomware_live | — |
| Johnson & Johnson Innovative Medicine | April 26, 2026 | ransomware_live | — |
| SmilePoint Dental Group | April 14, 2026 | ransomware_live | — |
| Asaniverko | April 13, 2026 | ransomware_live | — |
| Erla Technologies SAS | April 9, 2026 | ransomware_live | — |
| Brooklands of Mornington | April 6, 2026 | ransomware_live | — |
| AbelZeta | March 10, 2026 | ransomware_live | — |
| Bonheure | March 1, 2026 | ransomware_live | — |
| Ultimate Metals | February 23, 2026 | ransomware_live | — |
| Sitran MG | February 15, 2026 | ransomware_live | — |
| Darma Henwa | February 15, 2026 | ransomware_live | — |
| Siem Srl | February 10, 2026 | ransomware_live | — |
| Buff Law | February 10, 2026 | ransomware_live | — |
| Wagner Metal Concept | February 10, 2026 | ransomware_live | — |
| Kymco | February 8, 2026 | ransomware_live | — |
| PrintForm | February 7, 2026 | ransomware_live | — |
| Texcomp | February 6, 2026 | ransomware_live | — |
| Elgon Cosmetic | January 20, 2026 | ransomware_live | — |
| Autohaus Elstermann | December 23, 2025 | ransomware_live | — |
| Firmengruppe Hoffmann | December 20, 2025 | ransomware_live | — |
| GC Dental | December 18, 2025 | ransomware_live | — |
| Right Power Technology Sdn Bhd | December 9, 2025 | ransomware_live | — |
| Comcast | December 7, 2025 | ransomware_live | — |
| The Foot Doctor | December 6, 2025 | ransomware_live | — |
| EXPERTISE MOBSIGN | December 5, 2025 | ransomware_live | — |
| Slimsoft | December 4, 2025 | ransomware_live | — |
| The Foot Doctor's | November 13, 2025 | ransomware_live | — |
| Anderson Engineering | November 9, 2025 | ransomware_live | — |
| Rios Espinosa | November 2, 2025 | ransomware_live | — |
| DOVERN Import | October 21, 2025 | ransomware_live | — |
| Supercash (Reuploaded) | October 19, 2025 | ransomware_live | — |
| Quasar Inc | October 7, 2025 | ransomware_live | — |
| ROXU | October 5, 2025 | ransomware_live | — |
| Acuna Fombona (AFOM) | October 2, 2025 | ransomware_live | — |
| Edro Real Estate | September 22, 2025 | ransomware_live | — |
| RAC Consultoria | September 13, 2025 | ransomware_live | — |
| Northland Auto Solutions | September 9, 2025 | ransomware_live | — |
| Fattore Cosméticos Ltda | September 6, 2025 | ransomware_live | — |
| Smiles By Steedman | September 5, 2025 | ransomware_live | — |
| Gesimde Asociados / Ausil Systems / Esnova | August 25, 2025 | ransomware_live | — |
| Supercash (Alimentos Y Bebidas Premium) | August 23, 2025 | ransomware_live | — |
| SOP. Sistema Odontológico Privado | August 20, 2025 | ransomware_live | — |
| Ambitek | August 19, 2025 | ransomware_live | — |
| All Truck Transportation Co | August 19, 2025 | ransomware_live | — |
| Panorama | August 16, 2025 | ransomware_live | — |
| Batesky Law Office (BLO) | July 27, 2025 | ransomware_live | — |
| Universal Software Solutions | July 3, 2025 | ransomware_live | — |
| Universal Softare Solutions | June 24, 2025 | ransomware_live | — |
| Triveneta Vetro | June 14, 2025 | ransomware_live | — |
| AP Lettering | June 10, 2025 | ransomware_live | — |
| Collision & Classics | June 2, 2025 | ransomware_live | — |
| Fujipoly Ltd | May 27, 2025 | ransomware_live | — |
| Fujipoly Hong Kong Ltd | May 24, 2025 | ransomware_live | — |
| Curewell Pharmacy & Surgicals | May 21, 2025 | ransomware_live | — |
| 4Motive | May 6, 2025 | ransomware_live | — |
| First Choice Courier & Messenger | May 4, 2025 | ransomware_live | — |
| Nedved Architekti | May 3, 2025 | ransomware_live | — |
| VERTEL | April 29, 2025 | ransomware_live | — |
| EVERTECH INSTRUMENTAL CO., LTD | April 15, 2025 | ransomware_live | — |
| VIÑUELAS ABOGADOS | April 12, 2025 | ransomware_live | — |
| 3P Corporation | April 7, 2025 | ransomware_live | — |
| L&S Mechanical (Reuploaded) | April 3, 2025 | ransomware_live | — |
| Industrial Corona de México | March 29, 2025 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).