Spacebears Claims Gerencial Compromise and Data Exposure
Summary
A ransomware.live monitoring record attributes an unconfirmed claim to Spacebears concerning Brazilian accounting firm Gerencial. The actor allegedly exposed digital certificates, client data and more than 600,000 files.
Key points
- The record names Gerencial, a Brazilian accounting and business advisory firm, as the alleged victim and Spacebears as the actor.
- The claim is attributed to the actor’s leak-site listing and monitored by ransomware[.]live.
- The group allegedly exposed about 1,000 .pfx/.p12 digital certificates and their passwords for Brazilian government portals.
- Other allegedly exposed information includes client contact details, identification information and passwords, plus more than 600,000 files containing personal information.
- The post says the claims are unconfirmed; no statement from Gerencial is included.
Article Details
- Victim
- Gerencial
- Claim Date
- 2026-05-21
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Alleged by spacebears; not independently confirmed.
- Exfiltrated Data
- The group reportedly claimed exposure of personal digital certificates and corresponding passwords, client contact and identification details, and other passwords.
- Exfiltrated Size
- More than 600,000 files reportedly containing personal information; unverified.
- Ransom Demand
- Unknown; no ransom demand is reported.
- Leak Status
- spacebears reportedly made a public claim; the source says the claim and data authenticity could not be confirmed.