Firmengruppe Hoffmann

Firmengruppe Hoffmann was compromised in a ransomware attack attributed to spacebears in December 2025. The organization, operating in an undisclosed sector in Germany, was added to the group's data leak site as part of an extortion campaign.

spacebears operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Since 2003, the Hoffmann Group from Bernau has been a reliable partner in the areas of transport and recycling, earthworks and demolition, as well as ready-mix concrete and waste wood processing, enabling its customers to obtain all services related to a construction project from a single source. In addition to maintenance and repair, the company also serves as a competent contact for the sale of construction machineryDatabaseFinancial documentsPersonal information of employees and clients https://www.firmengruppe-hoffmann.de/