Signalis
sign in--:--:--UTC
Threat actors

Spacebears

☆ pin
Reports
39
First seen
May 12, 2026
Last seen
Oct 15, 2026
Motivation
Financial

Targeting

Sectors
Manufacturing ×6Healthcare ×6Professional Services ×4Technology ×4Retail & E-commerce ×4Telecommunications ×2Agriculture ×2Transport & Logistics ×1
Victim regions
×1
×8
United States×8
Italy×7
Brazil×3
Germany×3
Switzerland×2
China×1
South Korea×1
Mexico×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×106ip_v4 ×26url ×18hash_sha1 ×6hash_sha256 ×4hash_md5 ×2

Indicator values are available on Pro and via the API.

Recent reports

High

Spacebears publishes Alma Center Servizi Medicali S.r.l. as ransomware victim

ransomware.liveHigh

Spacebears claims Alma Center Servizi Medicali S.r.l. as new ransomware victim

ransomware.liveHigh

Spacebears claims victim: Holistic Health Group, Inc. (Suncrafted)

ransomware.liveHigh

Spacebears claims Tomix/Grupo JOPER breach on ransomware.live

ransomware.liveHigh

Spacebears claims D-MAX Engineering, Inc. as ransomware victim

ransomware.liveHigh

Spacebears publishes Sports Endeavors as ransomware victim

ransomware.liveHigh

Spacebears publishes SGLA Accountancy Corporation as ransomware victim

ransomware.liveHigh

Spacebears claims Studio Oculistico Ciraci in extortion post

ransomware.liveHigh

Spacebears ransomware gang publishes Holzmarkt Chemnitz as victim

ransomware.liveHigh

Spacebears Ransomware Claims Freelom ISP as Victim

ransomware.liveHigh

Spacebears publishes Sears (Grupo Sanborns) as ransomware victim

ransomware.liveHigh

Spacebears claims Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano in ransomware extortion

ransomware.liveHigh

Spacebears claims Elixi International SA pharmaceutical distributor breach

ransomware.liveHigh

Spacebears claims Hitech Distribuzione Informatica as ransomware victim

ransomware.liveHigh

Spacebears publishes PontoBR Sistemas as ransomware victim

ransomware.liveHigh

Spacebears publishes StellarRAD Systems as ransomware victim

ransomware.liveHigh

Spacebears ransomware gang publishes DoAllTech as victim

ransomware.liveHigh

Spacebears publishes Anpra SAS as ransomware victim

ransomware.liveHigh

Spacebears ransomware gang publishes BiesSse Group as victim

ransomware.liveHigh

Spacebears publishes Techpol-System as ransomware victim

ransomware.liveMedium

Spacebears ransomware gang publishes Turbosoft as victim

ransomware.liveHigh

Spacebears ransomware gang publishes Biessse as victim

ransomware.liveHigh

Spacebears ransomware gang publishes Fitcrunch as new victim

ransomware.liveHigh

Spacebears claims Blenheim luxury property firm in UK ransomware extortion

ransomware.liveHigh

Spacebears ransomware gang publishes Salters Propane as victim

ransomware.liveHigh

Spacebears publishes Chebib Control as victim

ransomware.liveHigh

Spacebears publishes Gerencial Contábil as ransomware victim

ransomware.liveHigh

Spacebears claims ECOVACS breach; ~2TB data stolen

ransomware.liveHigh

Spacebears publishes Cattani S.p.A. as ransomware victim

ransomware.liveHigh

Spacebears ransomware claims Lösing Filtertechnik

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans