Home All Victims Cattani

Cattani

spacebears

This record tracks a ransomware attack claimed by the spacebears group against Cattani. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.

Window Zero

EXPOSURE GAP

Window Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.

116days open
t1 · Published t2 · Pending
May 18, 2026Not disclosed yet
Country
Business Category
Manufacturing / Engineering
Employees
101-1000
Discovered
2026-06-10
Published
May 18, 2026
Disclosed / Notified
Not disclosed yet
Victim ID
TGpwBz2pYDsm

Attack Summary

Established in 1967, Cattani S.p.A. is now a leader in the dental field, exporting its range of products to all continents. After becoming a publicly limited company in 1981, Cattani S.p.A. founded the division Esam in 1984, extending the group’s business activities into the industrial field. In 2003 Cattani S.p.A. launched Magnolia, a chemical company specialising in the production of detergent disinfectant products for surgery instruments and, in particular, dental aspiration systems.The Cattani group designed and manufactured one of the scientific components in the famous NASA space shuttle. Due to our reputation for reliability, Ferrari Engineering (supplier of the European Space Agency) chose us as one of its prestigious suppliers for the production of a 180 gram compressor, which reached a pressure of 38 bar. The group has also taken part in the Eurostar project, the pride of the Italian railway system, producing the train’s pressurization system.-Personal information of employees and clients -Financial documents- 200 000 + other files  https://www.***.it/en/

Leak Screenshots

2 CAPTURED

Captured directly from the operator's leak site by our collector.

Proof files published by the operator — 1 image(s) harvested from this entry. Content is locked; type and dimensions shown.

No text found

Capture history — 11 day(s) tracked. Content is locked.

2026-09-10
2026-09-09
2026-09-08
2026-09-07
2026-09-06
2026-09-05
2026-09-05
2026-09-04
2026-09-03
2026-09-02
2026-09-01
Showing the latest capture only
Unlock the 11 captures already taken, plus the 1 proof file(s) the operator published.

Dark Web Exposure

Findings for cattani.it — indexed by HaveIBeenRansom.
7
found in Infostealer logs
14
found in Traditional breaches
0
found in Ransomware leaks
Cit0day [cit0day.in] breaches.csv
LKnet reserve chat · breach
••• emails
VerificationsIO_BF.7z.011
Kedr | Forum 🪾 · breach
••• emails
@BreachedData1 LinkedIn 2021-23 Cleaned.7z.001
Database World ROC · breach
••• emails
OnlinerSpambot_BF.7z
B F R e p o V 3 F i l e s · breach
••• emails
Dropbox_BF.7z
B F R e p o V 3 F i l e s · breach
••• emails
Database World ROC · breach
••• emails
Database World ROC · breach
••• emails
LKnet reserve chat · breach
••• emails
Leak volumes are locked
Sign in to reveal how many records each source exposed and the remaining 3 sources.
Want the complete picture — passwords, machines, full leak files? It's all searchable on HaveIBeenRansom.
Search this victim →
Visit Website Original Post View Group: spacebears
Legal Disclaimer: This ransomware victim record reflects information published on the operator's leak site. Breach.house only records what the operators themselves publish in the open. We take screenshots of their public pages and keep the proof material they post there, so that a listing can be verified and its status tracked over time. We do not purchase data, we do not solicit or encourage its publication, we do not access any private system, and we do not alter anything we record. Nothing is offered for download here, and detailed content is not published on this page or anywhere else on the public site: access to it is restricted to vetted customers under contract, for incident response, due diligence and cyber-resilience work. Breach.house is not affiliated with, and does not act on behalf of, the operators who publish this material. If you represent an organisation or individual named here and want a record reviewed or removed, contact us and we will act on it.