Right Power Technology Sdn Bhd listed on spacebears leak site
The spacebears group has listed Right Power Technology Sdn Bhd, a Malaysia-based company, on its leak site, claiming to have exfiltrated its data.
- Published
- 3 min read
- 3 min read
- Ransomware group: spacebears
- Country: Malaysia
- Sector: Technology
- Announcement date: December 12, 2025
Spacebears claims data breach at Right Power Technology Sdn Bhd
The threat actor known as spacebears has listed Right Power Technology Sdn Bhd on its leak site, alleging a significant data breach. This announcement, made on December 12, 2025, follows a claimed attack date of December 9, 2025. By listing the organization on their platform, the group is attempting to exert pressure on the company through the threat of public data exposure.
Ransomware groups often utilize leak sites to host stolen data or announcements regarding their targets. This tactic is a core component of modern extortion strategies, where the goal is not just to encrypt systems, but to steal sensitive information to use as leverage. When a group lists a victim, they are signaling that the confidentiality of the organization's data has been compromised, often as a precursor to demanding a ransom in exchange for not releasing the information.
Details of the alleged compromise
According to the claims made by spacebears, the breach involves the unauthorized access and exfiltration of various sensitive datasets. The group alleges that the breach occurred on December 9, 2025, and they are using the threat of leaking this information to pressure the organization. While the specific volume of data or the exact number of files taken have not been disclosed by the group, the categories of information targeted are clearly identified in their announcement.
The announcement specifies that the following types of information have been compromised:
- Employee personal information
- Client personal information
- Financial documents
The targeting of both employee and client data suggests a broad scope of the intrusion, aiming to impact the personal privacy of individuals associated with the company as well as its business relationships.
About Right Power Technology Sdn Bhd
Right Power Technology Sdn Bhd is a technology company based in Malaysia. Established in 2000, the organization specializes in the manufacturing and distribution of uninterruptible power supply (UPS) systems, voltage regulators, and various data center power protection solutions. The company provides essential power protection and maintenance services for critical facilities across multiple sectors, including the education, business, and commercial industries.
Analysis and potential consequences
The actions taken by the spacebears group present several significant risks to Right Power Technology Sdn Bhd. The alleged compromise of personal information belonging to both employees and clients increases the risk of identity theft and fraud for those individuals. Furthermore, the potential leak of financial documents could lead to negative consequences regarding corporate trade secrets and the overall operational continuity of the organization.
From a legal and regulatory perspective, the company may face repercussions under Malaysia's Personal Data Protection Act (PDPA) due to the sensitive nature of the data involved. Because the group's methodology appears to focus on data exfiltration and extortion rather than traditional encryption, there is a heightened possibility of secondary extortion attempts or the risk that the stolen data may be sold to other malicious actors on the dark web.
While the technical proficiency of groups like spacebears is a subject of varying perspectives within the intelligence community, their focus on direct data leaks can significantly accelerate reputational damage. Organizations in the technology and critical infrastructure support sectors often face heightened scrutiny following such events. To mitigate these risks, companies typically focus on strengthening data loss prevention (DLP) measures, implementing strict access controls, and ensuring robust monitoring of data movement to detect exfiltration attempts before they result in a public leak.