L&S Mechanical Hit by Ransomware Attack, Exposing Sensitive Data of 5,139 Texas Residents L&S Mechanical, a Texas-based contractor specializing in plumbing, HVAC, and electrical services, disclosed a ransomware attack that compromised the personal and financial data of 5,139 Texas residents. The breach, attributed to the Space Bears ransomware group, occurred after attackers gained access to the company’s database, project documentation, and sensitive records. The stolen data includes names, Social Security numbers, driver’s license numbers, government-issued IDs, credit/debit card details, medical information, health insurance data, and financial account numbers. The group threatened to publish the stolen information within six to seven days if their ransom demands were not met. L&S Mechanical reported the incident to the Texas Attorney General on March 6, 2026, following the discovery of the breach. While the company has not detailed its response to the ransom demand, it has urged affected individuals to monitor their accounts for fraudulent activity and consider placing fraud alerts or credit freezes with major credit bureaus. The exposure of highly sensitive data including medical and financial records heightens the risk of identity theft and fraud for those impacted. The incident underscores the growing threat of ransomware attacks targeting critical infrastructure and service providers.