spacebears
Activity analysis
HackerFeeds has tracked 161 victims claimed by spacebears since April 2024, most recently in October 2026 — ranking #49 of 332 groups (0.5% of all tracked ransomware victims). It posted 13 victims in the last 90 days, down 43% on the previous 90 days (23). Its most-targeted sector is Business Services (28 victims), followed by Technology (24). The United States accounts for 47 victims (30% of those with a known location); 2 victims did not disclose a location.
Victims per year
- 202443
- 202563
- 202655
Top sectors
- Business Services28
- Technology24
- Healthcare23
- Manufacturing19
- Consumer Services10
- Construction10
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Space Bears is a double-extortion ransomware group that emerged in April 2024, distinguished by a professional "corporate" aesthetic on its leak site, leveraging Phobos RaaS infrastructure and targeting small-to-medium organizations in manufacturing, technology, and healthcare across the US and Europe.
Recent victims
No victims tracked yet.