PrintForm Listed by spacebears Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
PrintForm has been listed by the spacebears ransomware group, with internal files reported exfiltrated; the listing came to light on February 10, 2026, and the number of individuals affected has not been disclosed. If you have any connection to PrintForm, review the group’s claims and consider changing passwords or enabling additional account protections.
On February 10, 2026, the ransomware group spacebears listed PrintForm on its leak site, claiming to have carried out a ransomware attack that resulted in the exfiltration of internal files. The number of individuals whose information may be involved remains unknown, and no further details on the volume or specific contents of the data have been made public.
The incident is significant because PrintForm operates in sectors that include medical devices, aerospace and defense, and energy, where the compromise of design files or production records can affect downstream supply chains and regulatory compliance.
What happened
Spacebears listed PrintForm on its leak site on February 10, 2026. The group claims that internal files were taken during a ransomware operation. No confirmation of the claim from PrintForm has been reported, and the number of people affected, the exact files involved, and whether any data was subsequently published remain undisclosed.
Who is spacebears?
Spacebears is a ransomware group that publicly lists victim organizations on a dedicated leak site. Such groups commonly employ double-extortion tactics, encrypting systems and threatening to release stolen data if a ransom is not paid. Their listings represent claims by the group rather than independently verified incidents.
Who is PrintForm?
PrintForm provides on-demand custom manufacturing of plastic and metal parts, serving industries that include medical, aerospace and defense, automotive, energy, oil and gas, and consumer products. The company positions itself as a single source for prototypes through production quantities across multiple manufacturing processes. Organizations in these sectors routinely handle technical drawings, material specifications, and customer order data.
What was likely exposed
The only detail released states that internal files were exfiltrated. The precise categories of data, file counts, or whether customer records, design files, or employee information are included have not been disclosed. Companies of this type typically store order histories, CAD files, supplier information, and contact details, but the actual contents of the claimed exfiltration remain unconfirmed.
Why it matters
Exposure of internal manufacturing files can create competitive or regulatory risks for organizations that rely on PrintForm for components used in regulated environments. Individuals whose contact or account information appears in those files may face increased phishing or account-compromise attempts. Because the scale of the incident is unknown, the extent of any downstream effects cannot yet be assessed.
What to do if you're exposed
Monitor email and financial accounts for unusual activity and enable multi-factor authentication where available. Review any recent communications from PrintForm or its partners for guidance. Individuals can run a free exposure scan of their email address against known breach data to check whether their information has appeared in previously published datasets.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Lösing Filtertechnik Listed by spacebears Ransomware GroupGeske Haus Hit by SpaceBears RansomwareWagner Metal Concept Listed by spacebears Ransomware GroupSpaceBears Ransomware Hits Italian Manufacturer BiesSseLatest breaches
Read GalaxyWarden’s full analysis of the PrintForm Listed by spacebears Ransomware Group →
Publicly posted by spacebears — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.