PrintForm targeted by spacebears ransomware group

• Ransomware group: spacebears
• Country: Germany
• Sector: Manufacturing
• Announcement date: February 10, 2026

Spacebears claims data compromise at PrintForm

The threat actor known as spacebears has listed the manufacturing company PrintForm on its leak site, alleging that the organization's data has been compromised. This announcement, posted on February 10, 2026, follows a claimed attack date of February 7, 2026. The group's listing suggests a potential attempt to initiate a negotiation process by using the threat of publishing stolen information as leverage.

In modern cyberattack scenarios, groups like spacebears often employ a strategy known as double extortion. In this model, attackers do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive data. The threat of leaking this data on a public forum creates significant pressure on the victim, as the loss of confidentiality can be more damaging than the temporary loss of system availability. This approach aims to maximize the likelihood of receiving a ransom payment by targeting the victim's reputation and legal standing.

Details of the alleged data theft

According to the announcement made by the spacebears group, the breach involves highly sensitive information related to the company's core operations. The group claims to have obtained technical drawings and various confidential documents that are critical to the organization's business functions. While the specific volume of data and the exact number of files involved have not been disclosed, the nature of the claimed theft points toward a significant loss of proprietary information.

The specific types of information mentioned in the claim include:

• Technical drawings
• Working projects
• Confidential client documents

The exposure of such documentation often indicates that attackers have gained access to internal file servers or engineering databases. When technical drawings and project files are targeted, the primary objective is frequently the theft of intellectual property, which can be sold to competitors or used for further malicious activities.

About PrintForm

PrintForm is a manufacturing company based in Germany that specializes in producing custom plastic and metal parts for various industries. The company's service portfolio is broad, ranging from prototyping to mass production. They utilize several advanced manufacturing methods, including 3D printing, CNC machining, silicone molding, and injection molding.

The organization serves a variety of high-stakes sectors, including the medical, aerospace, automotive, and energy industries. Because these sectors require high precision and strict adherence to specifications, the data managed by PrintForm is inherently sensitive and vital to the supply chains of its clients.

Risk assessment and industry implications

The data-leak-focused approach utilized by spacebears poses a significant risk to PrintForm's intellectual property and trade secrets. Because the company operates within the European Union, this incident may fall under the scope of the General Data Protection Regulation (GDPR), which could potentially trigger mandatory data breach notifications to regulators and affected parties.

Furthermore, because PrintForm serves sensitive sectors such as aerospace, defense, and medical, the incident could lead to secondary risks. These include the possibility of supply chain attacks, where the stolen data is used to compromise the company's clients, or targeted phishing campaigns aimed at individuals within those sensitive industries. The nature of the stolen data may undermine client trust and result in long-term commercial damages to the organization.

For organizations operating in the manufacturing sector, especially those involved in specialized production, several defensive steps are critical. Implementing robust access controls and multi-factor authentication can help protect sensitive engineering files. Additionally, maintaining strict network segmentation ensures that even if one part of the network is compromised, critical intellectual property remains isolated. Regular monitoring of data exfiltration patterns and maintaining a comprehensive incident response plan are also essential components of a modern cybersecurity posture to mitigate the impact of such breaches.