Schwartz, Giannini, Lantsberger & Adamson targeted by spacebears
The threat actor known as spacebears claims to have compromised data belonging to the California-based accounting firm Schwartz, Giannini, Lantsberger & Adamson (SGLA).
- Published
- 2 min read
- 2 min read
- Ransomware group: spacebears
- Country: United States
- Sector: Professional Services
- Announcement date: September 4, 2026
The threat actor known as spacebears has claimed to have compromised data belonging to the California-based accounting firm Schwartz, Giannini, Lantsberger & Adamson (SGLA). In an announcement published on September 4, 2026, the group listed the professional services firm on their leak site, alleging that they have successfully obtained data from the organization.
Details of the claim
The spacebears group has officially listed Schwartz, Giannini, Lantsberger & Adamson (SGLA) on their dedicated leak site. According to the announcement made on September 4, 2026, the group alleges that they have obtained data from the firm. The post provided by the threat actors includes general information regarding the firm's operations and indicates that a countdown timer has been initiated for the release of the data.
Ransomware groups often utilize leak sites as a tool for double extortion. In these scenarios, attackers do not just encrypt a victim's systems but also exfiltrate sensitive information to use as leverage. By threatening to publish the stolen data on a public platform, the attackers aim to pressure the organization into paying a ransom. The use of a countdown timer is a common tactic used by such groups to increase psychological pressure on the target organization.
Data involved in the incident
No specific details regarding the nature of the compromised data have been disclosed by the group. However, given the firm's accounting and auditing activities, it is possible that sensitive financial information may be involved. The listing does not name any specific data types.
About Schwartz, Giannini, Lantsberger & Adamson (SGLA)
Schwartz, Giannini, Lantsberger & Adamson (SGLA) is a full-service certified public accounting firm based in California, founded in 1988. The firm provides a variety of financial services to individuals and companies, including tax planning, auditing, bookkeeping, payroll, and business consulting.
Potential impact and industry implications
As SGLA is an accounting firm, the breach may pose risks to client financial records, tax information, and personal data. Given that the firm is based in the US, a potential data breach could trigger legal proceedings under state-level privacy laws and federal regulations. The spacebears group's focus on data exfiltration and extortion may increase secondary risks such as identity theft and targeted phishing attacks for the firm's clients.
Furthermore, considering the firm's audit and consulting services, the breach could potentially impact supply chain security. Organizations in the professional services sector often handle highly sensitive information, making them attractive targets for threat actors. When such firms are compromised, the ripple effect can extend to their entire client base, potentially introducing vulnerabilities into the broader business ecosystem.
To defend against such threats, organizations in this sector typically focus on robust security measures. This includes implementing multi-factor authentication, maintaining rigorous patch management protocols, and conducting regular security awareness training for employees. Additionally, maintaining comprehensive backups and implementing strict data encryption standards are vital steps in mitigating the impact of a potential breach. Information about the Space Bears group remains limited.