Tomix / Grupo JOPER in Portugal (PT) is accused of being targeted by the spacebears ransomware group, with impacts associated to the company Tomix, a Portuguese agricultural equipment manufacturer known for crop-protection machinery. The threat actor’s alleged activity is claimed to have affected operations in Portugal. #Portugal
Incident Details
- Victim: Tomix / Grupo JOPER
- Sector: Manufacturing
- Country: PT
- Actor: spacebears
- Source: http://5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb4v6mf3ki2ovid.onion/companies/77/tomix-grupo-joper
- Discovered: 2026-09-23T17:44:57.376445+00:00
- Published: 2026-09-23T17:44:21.121280+00:00
Information
- Tomix – Indústria de Equipamentos Agrícolas e Industriais, Lda. is a Portuguese manufacturer of crop-protection equipment, known for agricultural sprayers, atomizers, dusters, and related machinery.
- Founded in 1924 near Torres Vedras by Francisco Xavier Damião, the company grew into a market leader in Portugal for plant-treatment equipment, including rotomoulded tanks and high-pressure washers.
- Since 1997, Tomix has been majority-owned by JOPER – Indústria de Equipamentos Agrícolas, S.A., and now operates as part of the family-run JOPER Group alongside JOPER and Ribatejo.
- Together, the group supplies complementary agricultural machinery for transport, soil tillage, and crop treatment across Iberia and export markets.

Disclaimer: This post is based on public claims made by the ransomware group "spacebears". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.