Space Bears Ransomware Group Claims Breach of Comcast via Quasar Inc. Contractor The ransomware group Space Bears, which surfaced in April 2024 and is affiliated with the Phobos ransomware-as-a-service (RaaS) operation, has claimed responsibility for obtaining internal Comcast materials through a breach at Quasar Inc., a telecommunications engineering contractor. The group posted its claims on a dark web leak site, listing Quasar as a separate victim, indicating two interconnected incidents rather than a single breach. According to Space Bears, Quasar produced technical documentation for Comcast’s Genesis program, which the group exploited to access sensitive files. The compromised data allegedly includes city design documentation and utility plans for multiple locations, with a six-day countdown set for potential public release or sale. Additionally, the group claims to have exfiltrated network project documents, city drawings, and internal materials from Quasar itself, with a four-day deadline for that dataset. Comcast, a frequent target for extortion groups, has faced prior incidents, including claims from Medusa and previous vendor-related data exposures. This latest breach underscores the growing risks of third-party vendor compromises, where a contractor’s security failure can expose a larger organization’s sensitive infrastructure data. The incident also reflects the escalating value of telecommunications and utility-related data for cybercriminals.