Ransom! Tomix / Grupo JOPER (SEP-2026)

Ransom! Tomix / Grupo JOPER (SEP-2026)
Tomix / Grupo JOPER in Portugal (PT) is accused of being targeted by the spacebears ransomware group, with impacts associated to the company Tomix, a Portuguese agricultural equipment manufacturer known for crop-protection machinery. The threat actor’s alleged activity is claimed to have affected operations in Portugal. #Portugal

Incident Details

  • Victim: Tomix / Grupo JOPER
  • Sector: Manufacturing
  • Country: PT
  • Actor: spacebears
  • Source: http://5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb4v6mf3ki2ovid.onion/companies/77/tomix-grupo-joper
  • Discovered: 2026-09-23T17:44:57.376445+00:00
  • Published: 2026-09-23T17:44:21.121280+00:00

Information

  • Tomix – Indústria de Equipamentos Agrícolas e Industriais, Lda. is a Portuguese manufacturer of crop-protection equipment, known for agricultural sprayers, atomizers, dusters, and related machinery.
  • Founded in 1924 near Torres Vedras by Francisco Xavier Damião, the company grew into a market leader in Portugal for plant-treatment equipment, including rotomoulded tanks and high-pressure washers.
  • Since 1997, Tomix has been majority-owned by JOPER – Indústria de Equipamentos Agrícolas, S.A., and now operates as part of the family-run JOPER Group alongside JOPER and Ribatejo.
  • Together, the group supplies complementary agricultural machinery for transport, soil tillage, and crop treatment across Iberia and export markets.

Disclaimer: This post is based on public claims made by the ransomware group "spacebears". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live