Panorama listed on Space Bears leak site

• Ransomware group: Space Bears
• Country: Israel
• Sector: Professional Services
• Announcement date: August 17, 2025

Space Bears claims compromise of Panorama

The Space Bears ransomware group has published an announcement on their leak site claiming to have compromised data belonging to Panorama, a professional services firm based in Israel. The listing, which was discovered on August 17, 2025, alleges that the organization's sensitive information was accessed during a cyberattack that reportedly occurred on August 16, 2025.

Ransomware leak sites serve as a platform for threat actors to exert pressure on victims. In many modern cyberattacks, groups utilize these sites to announce successful breaches, often accompanied by claims of stolen data to facilitate extortion. This practice is a central component of the cybercriminal business model, where the threat of public exposure is used as leverage to demand payments from the targeted organization.

Details of the alleged data breach

According to the announcement made by the Space Bears group, the breach involves the exfiltration of several types of sensitive information. The group claims to be in possession of the organization's internal database and various financial documents. Furthermore, the threat actors allege that they have obtained personal information belonging to both employees and clients of the firm.

The specific categories of data mentioned in the claim include:

• Database
• Financial documents
• Employee personal information
• Client personal information

While the group has claimed these specific data types, no information was provided regarding the total size of the data exfiltrated or the specific file count. Additionally, no ransom demand has been made public in the current listing.

About Panorama

Panorama is a real estate agency operating in Israel, providing specialized consultancy services for property acquisition. The firm assists its clients through various stages of the real estate process, including property searches, navigating legal requirements, and managing financial matters. Their service model is designed to provide continuous support to clients until the final handover of property keys.

Risks and implications of the incident

The alleged data breach poses significant risks to the individuals involved. The theft of personal information belonging to employees and clients can lead to heightened risks of identity theft and fraud. When sensitive personal details are leaked, these individuals may become targets for various forms of social engineering and financial crimes.

For an organization operating within Israel, such an incident could lead to legal consequences under local data protection regulations. Furthermore, the nature of the Space Bears group, which focuses on data exfiltration and extortion, suggests that the organization may face double-extortion attempts. Double extortion is a tactic where attackers not only encrypt an organization's systems but also steal sensitive data, threatening to leak it publicly if the ransom is not paid, thereby creating two separate avenues for extortion.

The leakage of financial documents could also result in significant damage to the firm's commercial reputation and may create secondary risks for its supply chain. In the professional services sector, maintaining client trust is paramount, and a breach of this nature can disrupt business relationships and create vulnerabilities for partners and vendors connected to the firm.

In general, organizations in the professional services sector can take several defensive steps to mitigate such risks. Implementing robust data encryption, enforcing multi-factor authentication, and maintaining strict access controls are standard practices to protect sensitive client and employee information. Additionally, regular monitoring of network traffic and maintaining offline backups can help organizations detect and respond to unauthorized data exfiltration attempts. Publicly available information regarding the specific methods and identity of the Space Bears group remains limited.