Panorama Listed by Space Bears Ransomware Group

On August 16, 2025, Israeli real estate firm Panorama appeared on the leak site of the spacebears ransomware group. The listing indicates that internal files were exfiltrated during a ransomware attack, with unknown numbers of customers and employees potentially affected. The exposed data includes documents that could contain personal and financial details of clients who used the company’s services for property purchases in Israel.

Reported Details of the Breach

Public reporting from the ransomware.live tracker shows the spacebears group added Panorama to its data leak portal on August 16, 2025. The company assists clients with real estate acquisitions in Israel, handling budgets, legal requirements, and ongoing client relationships for buyers both inside the country and abroad. Available reporting describes the stolen material as internal files exfiltrated in a ransomware attack. No confirmed victim count has been released, and the precise volume or sensitivity of the documents remains unclear from current public information.

Why This Matters for You and Your Family

When a real estate company’s internal files are stolen, the information can include names, addresses, phone numbers, financial records, identification documents, and correspondence tied to property deals. If you or anyone in your family has ever bought, sold, or inquired about property in Israel through Panorama or a similar firm, your personal data may now sit in attackers’ hands. Real estate records often link directly to home addresses, family members’ names, and banking details, creating a single point that can expose your household far beyond one transaction.

These details do not expire. Criminals can use them months or years later to impersonate you, file fraudulent tax returns, open accounts, or pressure you with threats of public exposure.

The Doxxing and Identity-Chain Risks

Stolen real estate files frequently contain enough personal anchors—email addresses, phone numbers, passport copies, or family references—to begin an identity chain. Attackers link these anchors across social media, gaming accounts, and other breached databases. Once they map your online handles to your real name and home address, the risk shifts from data theft to targeted doxxing, harassment, or extortion. Credential leaks like this one regularly cascade into account takeovers, especially for gaming platforms where children’s accounts may reuse the same email or password as a parent’s real estate inquiry. Public reporting indicates that such chains can escalate quickly once a household’s core identity details surface in underground markets.

Spacebears Ransomware Group Track Record

Public reporting attributes the attack to the spacebears ransomware group. The group emerged in recent years and follows a double-extortion playbook: it encrypts victim systems, exfiltrates data before encryption, then threatens to publish the stolen files unless a ransom is paid. Notable prior victims listed on public trackers include companies across multiple sectors, though specific earlier cases tied to Israeli real estate remain limited in available reporting. The group typically posts samples or full datasets on its leak site when negotiations fail, using the exposure deadline as leverage.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity, with cleanup handled by specialists.
• Rotate any password you used on Panorama’s website or client portal anywhere else it is reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that can chain back to the same addresses or credentials.
• Let remediation specialists manage takedown requests for any exposed personal records appearing on data broker sites or underground forums.

The incident underscores that a single compromised service provider can quietly pull your family’s private details into the open. Acting quickly on password hygiene, identity mapping, and ongoing surveillance limits how far attackers can travel down the chain. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts—practical protection when credential leaks like Panorama’s turn into doxxing chains.