Gesimde Asociados / Ausil Systems / Esnova Listed by spacebears Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On August 25, 2025, the ransomware group known as spacebears listed Gesimde Asociados, along with associated entities Ausil Systems and Esnova, on its leak site. Public reporting indicates that internal files were exfiltrated in a ransomware attack, and the primary Gesimde website was observed as unavailable at the time of the listing. The number of people affected remains unknown, and further operational details of the incident have not been publicly confirmed.

This listing matters because the organisations involved develop and supply custom business software. Any compromise of internal material can create secondary risks for the companies that rely on those systems, even when the precise contents of the stolen archive have not been independently verified.

Inside the incident

According to the available record, spacebears claimed responsibility by posting Gesimde Asociados, Ausil Systems and Esnova on its leak site. The group stated that internal files had been taken during a ransomware attack and that the archive also contained data relating to the associated companies. The Gesimde site at gesimde.es was reported as currently unavailable. No public confirmation has been issued regarding the exact date of intrusion, the initial access method, the volume of data removed, or whether a ransom demand was paid or refused. The number of individuals whose information may appear in the material is listed as unknown. Beyond the leak-site claim and the observation that the website was offline, independent verification of the technical sequence remains limited.

The group behind it: spacebears

Spacebears is a ransomware operation that follows the now-common double-extortion model: data is first stolen, then encryption is applied to systems, and victims are threatened with public release of the material if payment is not made. Like other groups of this type, spacebears maintains a dedicated leak site where it posts the names of organisations it claims to have compromised, often accompanied by sample files or full archives once a deadline expires. Public tracking of ransomware activity shows that such groups typically target mid-sized enterprises across multiple sectors, relying on phishing, exposed remote-access services or unpatched vulnerabilities to gain entry. The listing of Gesimde Asociados, Ausil Systems and Esnova should be treated as an unverified claim by the group rather than as independently confirmed fact. No additional statements attributed specifically to this victim beyond the leak-site entry have been recorded in the available material.

About Gesimde Asociados / Ausil Systems / Esnova Listed by spacebears Ransomware Group

Gesimde Asociados is described as a technology company that has operated since 1980, specialising in custom software solutions for business clients. Its work includes planning tools, management systems and software designed to integrate with existing operational processes. The company is publicly associated with Ausil Systems and Esnova; reporting notes links through capital or executive relationships, and the claimed archive is said to contain material from these related entities as well. Organisations of this kind typically hold source code, client project files, internal documentation, employee records and contractual data. Because their products sit inside the daily workflows of other businesses, a breach can extend beyond the immediate victim to the wider customer base that depends on the software remaining secure and available.

The information in question

The only data type named in the public record is “internal files exfiltrated in a ransomware attack.” No inventory of specific file categories, record counts or personal-data fields has been released. Technology firms that build custom business software commonly store source-code repositories, project specifications, client contact lists, financial records, employee information and system-configuration details. Whether any of those categories appear in the material claimed by spacebears has not been confirmed. Until independent analysis or an official disclosure is published, the exact contents of the archive remain unconfirmed.

The real-world impact

For individuals whose details may be present, the principal risks include targeted phishing that references genuine project or employment information, identity-related fraud if personal identifiers were stored, and potential exposure of credentials that could be reused against other services. For the organisations themselves, the consequences can include temporary disruption of development or support operations, the cost of forensic investigation and system restoration, and the need to notify clients whose own data may have been held in project files. Because the software produced by Gesimde and its associated companies is used by other businesses, any leakage of configuration details or source material could also create secondary security concerns for those clients. The absence of a confirmed headcount or data inventory means the scale of these risks cannot yet be quantified.

If your data was in this claimed breach

If you have a past or present relationship with Gesimde Asociados, Ausil Systems or Esnova—as an employee, contractor or client—consider the following practical steps:

• Monitor financial and email accounts for unexpected activity and enable multi-factor authentication wherever available.
• Treat unsolicited messages that reference company projects or internal terminology with caution; verify them through known official channels.
• Change passwords that may have been used in connection with the organisations, especially if the same credentials appear on other services.
• Request a free exposure scan of your email address against known breach data sets to determine whether your information has already appeared in public collections.

Public detail on this incident remains limited. Continue to watch for any official statements from the companies involved, and treat the spacebears listing as a claim until further evidence is available.

AICompiled with AI assistance from public sources and published under our editorial standards.