StellarRAD Systems Listed by Space Bears Ransomware Group

On July 29, 2026, the ransomware group known as spacebears listed StellarRAD Systems on its leak site, claiming the telecommunications GIS software and services provider suffered a ransomware attack in which internal files were exfiltrated. The company, which has provided fiber and copper network management tools since 1981, has not publicly confirmed the claim as of this writing.

Leak Site Claim Details

The spacebears leak-site listing states that internal files were exfiltrated during a ransomware attack on StellarRAD Systems. The entry does not specify the volume of data taken, the exact types of records involved, or any ransom demand or deadline. According to the listing, the group is threatening to publish the allegedly stolen files if their demands are not met. Because the primary disclosure comes solely from the threat actor’s own leak site via ransomware.live, this remains an unconfirmed claim. StellarRAD Systems has issued no official breach notification, and no regulator or federal agency has published details about the incident.

Why This Matters to You and Your Family

StellarRAD Systems supplies specialized GIS and network management software to telecommunications providers worldwide. If the claim is accurate, the exposed internal files could contain contracts, employee records, customer project data, or partner information that ultimately links back to individuals. Even when corporate victims are the direct target, the downstream consequences frequently reach ordinary customers, employees, and their families. A single leaked spreadsheet or database can expose names, addresses, phone numbers, and professional emails that are later used to launch targeted phishing, identity theft, or account takeover attempts against you.

Doxxing and Identity-Chain Risks

Ransomware operators like spacebears routinely publish compressed archives or sample files to prove they hold the data. Once those files appear on dark-web forums or leak sites, they are quickly scraped and cross-referenced with other breaches. This creates long identity chains: an email address allegedly taken from StellarRAD’s files can be matched to credentials from an earlier breach, a gaming username, or a family member’s social-media handle. The result is doxxing that can expose home addresses, children’s names, and linked accounts in a matter of days. Credential leaks of this nature often cascade into gaming account takeovers, especially for households where the same passwords or recovery emails are reused across work, personal, and children’s profiles.

Spacebears Ransomware Group Track Record

Public reporting attributes the spacebears group with emerging in late 2025. The actor has targeted mid-sized technology, engineering, and professional-services firms, typically using phishing or exploited remote-access tools for initial access. After gaining a foothold they focus on exfiltrating sensitive files before deploying ransomware. Their playbook emphasizes double-extortion: encrypting systems while simultaneously threatening to release stolen data. Notable prior victims listed on their site have included engineering consultancies and software vendors serving critical infrastructure sectors. The group’s leak site is used both to pressure victims and to advertise their “successes” to other criminals.

What to do

• Run a DoxxScan to map every link between your email addresses, phone numbers, usernames, and real-world identity so you can see exactly what this incident may have exposed about you or your family.
• Rotate any password you have ever used at StellarRAD Systems or its partner telecom providers, and enable 2FA with an authenticator app everywhere that password was reused.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next time your information surfaces you are alerted within hours rather than months.
• Cover your entire household with DoxxScan family protection, which includes dependents and children’s gaming accounts that frequently become targets when corporate credential leaks create doxxing chains.
• Let DoxxScan remediation specialists handle data-broker takedown requests and opt-out processes on your behalf while you focus on securing accounts.

The incident underscores how even specialized B2B software vendors can become gateways to personal exposure. Staying ahead of these cascading risks requires more than reactive password changes. Try DoxxScan for its continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that explicitly protects children’s gaming accounts. Acting early limits the window threat actors have to exploit leaked data.