In July 2026, DoAllTech, a company specializing in construction IT, was listed on a ransomware leak site by the Space Bears group. The group claimed to have exfiltrated internal files, including personal information of employees and clients, as well as financial documents. This incident was first observed on July 22, 2026.
The specific types of personal information and financial documents compromised remain unclear, with no details confirming SSNs, medical data, bank account numbers, or payment card data. The number of affected individuals has not been quantified, and no official notification letters or statements from DoAllTech have been found. Regulatory filings with state Attorneys General have also not been located.
Further details, including the exact scope of the data compromise and the total number of individuals affected, have not yet been publicly confirmed. Official notification activities by DoAllTech have not been found in the provided research.