Siem Srl

Siem Srl was compromised in a ransomware attack attributed to spacebears in February 2026. The organization, operating in an undisclosed sector in Italy, was added to the group's data leak site as part of an extortion campaign.

spacebears operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Siem Srl, part of Kalisa Holding Srl, specializes in automation and protection systems for electrical infrastructures. The company develops equipment for energy management and monitoring, serving major airports and civil-industrial facilities. Siem Srl offers tailored solutions focused on enhancing efficiency and integrating renewable energy sources. Its products are known for high reliability and quality, making them highly sought after by large enterprises and infrastructure projects.- customer contracts- financial reports- customer drawings (factories, airports, etc.)- employee personal data- projects https://www.siem.it