Geske Haus- und Versorgungstechnik GmbH in Germany, reported a ransomware incident attributed to the spacebears threat actor, resulting in the compromise and potential exposure of sensitive data including employee and client personal information, as well as other company files (https://www.***.de/). The attackers also demanded attention as part of the incident involving the company’s construction and technology services. #Germany
Incident Details
- Victim: Geske Haus- und Versorgungstechnik GmbH
- Sector: Manufacturing
- Country: DE
- Actor: spacebears
- Source: http://5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb4v6mf3ki2ovid.onion/companies/46/geske-haus-und-versorgungstechnik-gmbh
- Discovered: 2026-06-03T13:32:51.825132+00:00
- Published: 2026-05-07T00:00:00+00:00
Information
- Family-run business in its third generation, with over half a century of experience focused on quality, innovation, and customer service.
- Provides heating, plumbing, and sheet metal services for construction and technology needs.
- Specializes in increasingly complex technologies, from simple liquid fuel heating systems to heat pumps.
- Claims to handle customer requests quickly and efficiently.
- Exposed database data.
- Personal information of employees and clients was compromised.
- Other files were also affected.

Disclaimer: This post is based on public claims made by the ransomware group "spacebears". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.