Threat group
Organisations Space Bears has claimed on its leak site or that reporting links to it, newest first. A claim stays a claim until the organisation or a regulator says otherwise.
Organisations linked, last 12 months
Every item here rests on the group's own leak site. None has been confirmed by the organisation named or by a regulator yet.
Leak-site claims tracked by RansomLook (ransomlook.io), , enriched by Black Shard.
Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.
Updated 13 Nov 2026, 14:05 UTC, 33 of 36 sources answering. History from 13 Nov 2025.
Where a group operates from is rarely sourced, so the map never draws a line from one.
Spotted an error? Report a correction. Is your organisation listed? Send us a statement.
CISA Known Exploited Vulnerabilities, NVD, CVE.org, CIRCL Vulnerability-Lookup, GitHub Advisory Database (CC BY 4.0), OSV (CC BY 4.0), RansomLook (CC BY 4.0, enriched by Black Shard), SEC EDGAR, HHS breach portal, Have I Been Pwned (CC BY 4.0), Texas Attorney General, California Attorney General, Delaware Department of Justice, Vermont Attorney General, GDELT Project, Cloudflare status, abuse.ch SSLBL (CC0), CISA ICS advisories, NCSC UK (OGL v3.0), CERT-EU (CC BY 4.0), NCSC New Zealand (CC BY 4.0), MISP galaxy (CC0), OAIC determinations (CC BY 4.0), abuse.ch Feodo Tracker (CC0), Spamhaus DROP (Spamhaus DROP terms), blocklist.de, CINS Army, CERT-FR (Licence Ouverte 2.0), Red Hat Security Data (CC BY 4.0), ENISA EUVD, Microsoft MSRC, JVN iPedia, FIRST EPSS, IODA, GeoNames (CC BY 4.0), Natural Earth, Wikidata, Regional Internet Registries (delegation statistics), Protomaps, OpenStreetMap contributors (ODbL), NASA GIBS. Items link to their sources, except leak-site claims, which are never linked. This product uses the NVD API but is not endorsed or certified by the NVD.
Built on open-source software under the MIT licence. Map data from Natural Earth, NASA GIBS, Protomaps and OpenStreetMap contributors.
© 2026 Black Shard Pty LtdABN 66 696 910 773