Space Bears ransomware group lists SGLA (Schwartz, Giannini, Lantsberger & Adamson) on its leak site
SGLA Accountancy Corporation, a firm in Stockton, California, has been listed on the Space Bears leak site. The group says fragments of the archive will become downloadable when a countdown ends and that the full archive can be purchased.
- Published
- 2 min read
- 2 min read
- Ransomware group: Space Bears
- Country: United States
- Sector: Professional Services
- Announcement date: October 22, 2026
Space Bears claims to have targeted SGLA
The ransomware group known as Space Bears has listed SGLA (Schwartz, Giannini, Lantsberger & Adamson) on its dedicated leak site. According to the group's announcement, the firm has been targeted in a data theft operation. The group has implemented a countdown mechanism on their platform, stating that fragments of the stolen archive will become available for free download once the timer expires. However, the group claims that the complete archive can be purchased through direct contact with a manager.
The listing appeared on the leak site on October 22, 2026. At the time the information was recorded, the post had received 111 views. The group's interface showed a countdown timer set for nine days, two hours, and fifty-seven minutes, with the download button currently disabled. This tactic is a common feature of modern ransomware operations, where threat actors use psychological pressure and time-sensitive threats to coerce victims into paying ransoms.
Details of the alleged breach
The announcement provided by Space Bears lacks specific technical details regarding the scope of the incident. The listing does not provide information regarding the total size of the stolen data or the specific file count involved in the breach. Furthermore, the group has not issued a ransom demand or specified the amount required to prevent the release of the data.
Regarding the content of the stolen information, the listing does not describe what specific data was taken. While the group intends to release fragments of the archive for free after the countdown ends, they have not provided any sample documents or content to verify the authenticity of their claims. Consequently, the exact nature of the data remains unconfirmed.
Potential data types
The listing names no specific data types as being stolen.
About SGLA (Schwartz, Giannini, Lantsberger & Adamson)
SGLA is a full-service certified public accounting firm based in California, which was founded in 1988. The firm offers a wide range of financial services to both individuals and various companies. Their professional service portfolio includes tax planning, auditing, bookkeeping, payroll, and business consulting.
The firm operates out of Stockton and serves a diverse client base. Their professional work primarily involves supporting clients in sectors such as real estate, healthcare, nonprofit organizations, affordable housing, and local government entities. Given the nature of their business, the firm handles sensitive financial information for a variety of specialized sectors.
Assessment and industry implications
It is important to note that this entry is based solely on the group's own claim. The scope, size, and authenticity of the allegedly stolen data have not been independently verified. The absence of sample documents in the provided screenshots makes it difficult to verify the validity of the claim at this stage. This highlights the difficulty security professionals face when dealing with