RANSOMWARE VICTIMHEALTHCARE

Elixi International SA

spacebears📍 Switzerland (CH)📅 August 10, 2026
8
same group

Attack Intelligence

Elixi International SA was compromised in a ransomware attack attributed to spacebears in August 2026. The organization, operating in the Healthcare sector in Switzerland, was added to the group's data leak site as part of an extortion campaign.

spacebears operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Elixi International SA is a Swiss pharmaceutical distributor (headquartered in Chiasso, founded in 2016) specializing in the global supply of both licensed and unlicensed medicinal products, including expanded access programs for patients.The company operates on a B2B model, serving hospitals, clinics, and pharmacies, ensuring quality through its Swissmedic license and robotic authenticity control systems, while prioritizing the rapid delivery of life-saving medicines.In addition to Switzerland, it has offices in Singapore.-SQL Data-Personal information of employees and clients-Financial documents https://www.elixi-int.com/

Additional Details

Other Victims — spacebears (8)

Quick Facts

CountrySwitzerland (CH)
SectorHealthcare
Attack DateAug 10, 2026
Intel Sourceransomware.live

Threat Group

spacebears
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.