// THREAT ACTOR
SPACE-BEARS_
ActiveSPACE-BEARS is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of SPACE-BEARS — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
Victims by year
- 2026 47
- 2025 61
- 2024 46
Leak site mirrors
1 mirror tracked, 1 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb4v6mf3ki2ovid.onionSpace Bears snapshot · 2026-08-19 23:02
Recent victims
The 50 most recent victims claimed by SPACE-BEARS. Total in the index: 154.
| Date listed | Victim | Description |
|---|---|---|
| 2026-08-15 | SEARS (Grupo Sanborns) | SEARS (Grupo Sanborns, S.A. de C.V.) is a leading Mexican retail compa… |
| 2026-08-12 | Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano | Basso Fedele & Figli S.r.l. is a historic Italian family company found… |
| 2026-08-10 | Elixi International SA | Elixi International SA is a Swiss pharmaceutical distributor (headquar… |
| 2026-08-07 | Hitech Distribuzione Informatica S.r.l. (HTDI) | HTDI is a leading Italian provider of comprehensive IT solutions based… |
| 2026-08-05 | PontoBR Sistemas | Founded in 2008 in Brazil, PontoBR Sistemas is an IT firm specializing… |
| 2026-07-29 | StellarRAD Systems | Since 1981, StellarRAD Systems exists to solve the critical issues fac… |
| 2026-07-22 | DoAllTech | The Company is leading the construction IT industry with the best tech… |
| 2026-07-22 | Anpra SAS | With over a decade of experience in the auto parts sector, Anpra SAS h… |
| 2026-07-22 | BiesSse Group | The BiesSse group, which has been operating on the global market for o… |
| 2026-07-16 | FITcrunch | FITCRUNCH® makes getting protein more enjoyable than ever before. Sati… |
| 2026-07-13 | Turbosoft | We specialize in the design and construction of IT and management syst… |
| 2026-07-13 | Techpol-System | Techpol-System, based in Bieruń, Poland, is an engineering enterprise … |
| 2026-07-08 | Biessse | The BiesSse group, which has been operating on the global market for o… |
| 2026-07-07 | Fitcrunch | FITCRUNCH® makes getting protein more enjoyable than ever before. Sati… |
| 2026-07-06 | Blenheim | Blenheim is a UK-based luxury property company specializing in high-en… |
| 2026-07-02 | Salters propane | Salter’s Propane is excited and proud to be joining the Salter’s Famil… |
| 2026-06-17 | Chebib Control | Chebib Control is a company specializing in the development of managem… |
| 2026-06-17 | Gerencial | Gerencial Contábil (Gerencial PR) is a Brazilian accounting and busine… |
| 2026-06-16 | ECOVACS | ECOVACS is a highly successful Chinese robotics company founded in 199… |
| 2026-06-10 | Cattani | Established in 1967, Cattani S.p.A. is now a leader in the dental fiel… |
| 2026-06-10 | Lösing Filtertechnik | Lösing Filtertechnik (Willibrord Lösing Filtertechnik e.K.) is a leadi… |
| 2026-06-04 | Sicol | SICOL – JS Cobranças e Serviços is a Brazilian company specializing in… |
| 2026-06-03 | Geske Haus- und Versorgungstechnik GmbH | Your partner for construction and technology solutions.We are your par… |
| 2026-06-02 | Stellar | Stellar’s mission is to bring resilient connectivity to mobility, ente… |
| 2026-05-27 | Ridge Law Firm | Ridge Law Firm (ridgelawfirm.com) is a personal injury law firm based … |
| 2026-05-27 | Gestordes | At Gestordes Administrative Management, we understand that both your b… |
| 2026-05-26 | BASE SPA | BASE S.p.A. is a company internationally operating in the field of goo… |
| 2026-05-26 | Filabé | Filabé of Switzerland is a skincare company that uses a unique, additi… |
| 2026-05-26 | Hunter | Hunter was created by Antoine Finkelstein and François Grante in 2015.… |
| 2026-05-12 | SmilePoint Dental Group | SmilePoint Dental Group is a fast-growing dental organization operatin… |
| 2026-05-05 | Erla Technologies SAS | Our company, Erla Technologies SAS, has specialised for more than 30 y… |
| 2026-05-04 | Johnson & Johnson Innovative Medicine | Johnson & Johnson Innovative Medicine (formerly known as Janssen Pharm… |
| 2026-04-14 | Ultimate Metals | https://www.tungsten-alloys.co.uk/ Ultimate Metals is an international… |
| 2026-04-14 | Asaniverko | Asaniverko is a Belgian heating and cooling specialist based in Boom … |
| 2026-04-07 | Brooklands of Mornington | For accommodation on the Mornington Peninsula, Brooklands of Morningto… |
| 2026-03-19 | Bonheure | Karaoke BusinessOperation of a network of karaoke establishments, prov… |
| 2026-03-12 | AbelZeta | AbelZeta Pharma is a global cell therapy leader focused on discovering… |
| 2026-02-18 | Elgon Cosmetic | Elgon Cosmetic - was founded in 1970 in Italy. Since then, it has esta… |
| 2026-02-17 | Wagner Metal Concept | WMC-Metal (Wagner Metal Concept) - company specializing in the manufac… |
| 2026-02-17 | Kymco | Kymco (Kwang Yang Motor Co., Ltd.) - Taiwanese company founded in 1963… |
| 2026-02-16 | Darma Henwa | PT Darma Henwa Tbk - established in 1991, is a company that specializ… |
| 2026-02-16 | Sitran MG | SITRAN - founded in 1971 in Belo Horizonte, is a company specializing … |
| 2026-02-14 | Buff Law | Rosenthal, Kooshoian & Lennon, LLP is a long-established Buffalo, New … |
| 2026-02-13 | Siem Srl | Siem Srl, part of Kalisa Holding Srl, specializes in automation and pr… |
| 2026-02-10 | PrintForm | Our mission is to make it easy for customers to buy custom-designed pa… |
| 2026-02-10 | Texcomp | Innovate.Collaborate. Succeed.We assist businesses in reaching new hei… |
| 2026-02-04 | GC Dental | A Sensational Smile Can Be Yours at GC DentalWelcome to GC Dental, whe… |
| 2025-12-30 | Firmengruppe Hoffmann | Since 2003, the Hoffmann Group from Bernau has been a reliable partner… |
| 2025-12-24 | Autohaus Elstermann | Performance, reliability, safety – what distinguishes Renault / Dacia … |
| 2025-12-16 | Comcast REUP FOR SALE | REUP FOR SALE The archive contains samples of the Comcast leak. The to… |
// CONFIRMED ATTACKS
Space Bears confirmed attacks: 10 verified incidents
Ransomnews has verified 10 Space Bears incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from June 2024 to June 2025. United States accounts for 5 of them (50%), with victims recorded in 5 countries in total. The most affected sector is manufacturing, at 2 confirmed victims. A ransom payment was publicly confirmed in 0 cases and publicly refused in 1; the outcome is unrecorded in the remaining 9. Where a figure was disclosed (5 cases), these incidents account for 18,429 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Space Bears incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| June 2025 | Vertel | Utilities | Sydney, Australia | — | Unknown | Source |
| May 2025 | Fujipoly Hong Kong Ltd. | Manufacturing | Hong Kong, Hong Kong | — | Unknown | Source |
| April 2025 | 3P Corporation | Finance | Melbourne, Australia | — | Unknown | Source |
| February 2025 | L&S Mechanical | Construction | Texas, United States | 5,145 | Unknown | Source |
| February 2025 | Whittaker & Company CPAs | Finance | California, United States | 2,669 | Unknown | Source |
| January 2025 | General Digital Corporation | Manufacturing | Connecticut, United States | 114 | Unknown | Source |
| November 2024 | Pineland Behavioral Health and Developmental Disabilities Community Service Board | Government | Georgia, United States | 501 | Unknown | Source |
| November 2024 | Intermed Hospital | Healthcare | Ulaanbaatar, Mongolia | — | No | Source |
| July 2024 | Caisse Nationale de Prévoyance Sociale (CNPS) | Government | Bamenda, Cameroon | — | Unknown | Source |
| June 2024 | Sun City Pediatrics PA | Healthcare | Texas, United States | 10,000 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Space Bears's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design — most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.