Ransomware Group intelligence
Safepay
ActiveTrack Safepay with 613 published victims and 5 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Safepay is tracked by Breach House as a ransomware group with 613 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Leak Status Distribution
613
- Leaked 181 29.5%
- Pending 430 70.1%
- Deleted 2 0.3%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 3 | Onion service | Down checked 35m ago | nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion |
| Leak location 5 | Onion service | Down checked 35m ago | safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion |
| Leak location 4 | Onion service | Down checked 35m ago | j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion |
| Leak location 2 | Onion service | Down checked 36m ago | cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion |
| Leak location 1 | Onion service | Down checked 36m ago | nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion |
Top Activity Sectors (17)
- Not identified 147
- Communication / Marketing 94
- Manufacturing / Engineering 64
- Services 49
- IT 38
- Construction / Real Estate 31
- Healthcare / Pharma 29
- Education 27
- Retail / E-commerce 27
- Finance / Legal / Insurance 27
- Agriculture / Food 17
- Transportation / Travel / Logistics 15
- Public Sector 14
- Hospitality / Food & Beverage / Tourism 13
- NGOs / Associations 10
- Energy 4
- null 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Safepay, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v20.0. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: safepay executes PowerShell scripts to run payload logic, disable defenses, and stage ransomware components.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: safepay uses registry run keys and startup folders to maintain persistence after reboot.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: safepay disables or modifies security tools such as antivirus and monitoring agents to prevent detection and cleanup.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1688 Safe Mode Boot Defense Impairment
What they do: safepay attempts safe mode boot manipulation to disrupt recovery workflows and evade host-based defenses.
What that means: Adversaries may abuse Windows safe mode to disable endpoint defenses.
-
T1027.016 Junk Code Insertion Stealth
What they do: safepay inserts junk code into binaries to evade static analysis and signature-based detection.
What that means: Adversaries may use junk code / dead code to obfuscate a malware’s functionality.
-
T1070.004 File Deletion Stealth
What they do: safepay deletes Volume Shadow Copies and temporary files to eliminate recovery options and reduce forensic traces.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1135 Network Share Discovery Discovery
What they do: safepay uses network share discovery to locate victim file shares and staging directories for encryption targets.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: safepay moves laterally through SMB/Windows Admin Shares to encrypt additional systems across the network.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: safepay encrypts victim files and backups using its ransomware payload to maximize impact and extortion leverage.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1491.001 Internal Defacement Impact
What they do: safepay performs internal defacement by replacing or corrupting victim files to demonstrate impact and pressure victims.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
Tools Observed (8)
▼Software Safepay has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Discovery
Invoke-ShareFinder
Exfiltration
FileZilla
7zip
WinRAR
LOLBAS (living-off-the-land binaries)
Regsvr32.exe
CMSTPLUA
dllhost.exe
RMM Tools
Microsoft RDP
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (2)
▼The note this group leaves on a compromised machine. Click a filename to read it.
readme_safepay.txt
Greetings! Your corporate network was attacked by SafePay team. Your IT specialists made a number of mistakes in setting up the security of your corporate network, so we were able to spend quite a long period of time in it and compromise you. It was the misconfiguration of your network that allowed our experts to attack you, so treat this situation as simply as a paid training session for your system administrators. We ve spent the time analyzing your data, including all the sensitive and confidential information. As a result, all files of importance have been encrypted and the ones of most interest to us have been stolen and are now stored on a secure server for further exploitation and publication on the Web with an open access. Now we are in possession of your files such as: financial statements, intellectual property, accounting records, lawsuits and complaints, personnel and customer files, as well as files containing information on bank details, transactions and other internal documentation. Furthermore we successfully blocked most of the servers that are of vital importance to you, however upon reaching an agreement, we will unlock them as soon as possible and your employees will be able to resume their daily duties. We are suggesting a mutually beneficial solution to that issue. You submit a payment to us and we keep the fact that your network has been compromised a secret, delete all your data and provide you with the key to decrypt all your data. WE ARE THE ONES WHO CAN CORRECTLY DECRYPT YOUR DATA AND RESTORE YOUR INFRASTRUCTURE IN A SHORT TIME. DO NOT TRY TO DECRYPT YOUR FILES YOURSELF, YOU WILL NOT BE ABLE TO DO THIS, YOU WILL ONLY DAMAGE THEM AND WE WILL NOT BE ABLE TO RESTORE THEM. In the event of an agreement, our reputation is a guarantee that all conditions will be fulfilled. No one will ever negotiate with us later on if we don't fulfill our part and we recognise that clearly! We are not a politically motivated group and want nothing more than money. Provided you pay, we will honour all the terms we agreed to during the negotiation process. In order to contact us, please use chat below, you have 10 days to contact us, after this time a blog post will be made with a timer for 3 days before the data is published and you will no longer be able to contact us. To contact us follow the instructions: Install and run Tor Browser from https://www.torproject.org/download/ Go to http://dgcg5ncjab6scb7fnk7gx5php4lbpxjy2jjnu3apnkxyippqf6yhw3ad.onion Reserve Link: http://oxly5vxvvhi5fv5vsvj3kvlqeprbijitycqisylaxzf324bn7e4qr2ad.onion Log in with ID: [snip] Contact and wait for a reply, we guarantee that we will reply as soon as possible, and we will explain everything to you once again in more detail. Our blog: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion http://nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion Our TON blog: tonsite://safepay.ton You can connect through your Telegramm account.
readme_safepay_ascii.txt
Greetings! Your corporate network was attacked by SafePay team. Your IT specialists made a number of mistakes in setting up the security of your corporate network, so we were able to spend quite a long period of time in it and compromise you. It was the misconfiguration of your network that allowed our experts to attack you, so treat this situation as simply as a paid training session for your system administrators. We ve spent the time analyzing your data, including all the sensitive and confidential information. As a result, all files of importance have been encrypted and the ones of most interest to us have been stolen and are now stored on a secure server for further exploitation and publication on the Web with an open access. Now we are in possession of your files such as: financial statements, intellectual property, accounting records, lawsuits and complaints, personnel and customer files, as well as files containing information on bank details, transactions and other internal documentation. Furthermore we successfully blocked most of the servers that are of vital importance to you, however upon reaching an agreement, we will unlock them as soon as possible and your employees will be able to resume their daily duties. We are suggesting a mutually beneficial solution to that issue. You submit a payment to us and we keep the fact that your network has been compromised a secret, delete all your data and provide you with the key to decrypt all your data. WE ARE THE ONES WHO CAN CORRECTLY DECRYPT YOUR DATA AND RESTORE YOUR INFRASTRUCTURE IN A SHORT TIME. DO NOT TRY TO DECRYPT YOUR FILES YOURSELF, YOU WILL NOT BE ABLE TO DO THIS, YOU WILL ONLY DAMAGE THEM AND WE WILL NOT BE ABLE TO RESTORE THEM. In the event of an agreement, our reputation is a guarantee that all conditions will be fulfilled. No one will ever negotiate with us later on if we don't fulfill our part and we recognise that clearly! We are not a politically motivated group and want nothing more than money. Provided you pay, we will honour all the terms we agreed to during the negotiation process. In order to contact us, please use chat below, you have 10 days to contact us, after this time a blog post will be made with a timer for 3 days before the data is published and you will no longer be able to contact us. To contact us follow the instructions: Install and run Tor Browser from https://www.torproject.org/download/ Go to http://dgcg5ncjab6scb7fnk7gx5php4lbpxjy2jjnu3apnkxyippqf6yhw3ad.onion Reserve Link: http://oxly5vxvvhi5fv5vsvj3kvlqeprbijitycqisylaxzf324bn7e4qr2ad.onion Log in with ID: [snip] Contact and wait for a reply, we guarantee that we will reply as soon as possible, and we will explain everything to you once again in more detail. Our blog: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion http://nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion Our TON blog: tonsite://safepay.ton You can connect through your Telegramm account.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (613)
Search, filter and paginate the victim timeline for Safepay. Showing 1–100 of 613.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | ehrenwall.de id36179 View details | Germany | Manufacturing / Engineering | pending | ||
|
ehrenwall.de Founded in 1880, the institution has a long history of providing specialized psychiatric and psychological healthcare services. It focuses primarily … 77 Learn More |
||||||
| Ransomware | jhz-bernardshof.de id36180 View details | Germany | Services | pending | ||
|
jhz-bernardshof.de Established in 1928, the organization provides residential, semi-residential and outpatient support services for children, adolescents and young adults who require … 77 Learn More |
||||||
| Ransomware | prospecthillcamberwell.com.au id36181 View details | Australia | Services | pending | ||
|
prospecthillcamberwell.com.au The organization provides residential accommodation and lifestyle services for older Australians seeking independent living in a secure and socially connected … 84 Learn More |
||||||
| Ransomware | fuss-sprunggelenk.de id36174 View details | Germany | Manufacturing / Engineering | pending | ||
|
fuss-sprunggelenk.de The organization focuses on the diagnosis, treatment and surgical management of disorders affecting the foot, ankle joints and lower extremities. … 47 Learn More |
||||||
| Ransomware | sportschule-steinbach.de id36175 View details | Germany | Education | pending | ||
|
sportschule-steinbach.de Established in 1957, the institution is operated by Badischer Sportbund Freiburg e.V., the regional sports federation responsible for supporting organized … 53 Learn More |
||||||
| Ransomware | titres-services.net id36176 View details | Germany | Services | pending | ||
|
titres-services.net The company provides household assistance and cleaning services under Belgium's government-regulated service voucher (titres-services) system. Its activities primarily focus on … 60 Learn More |
||||||
| Ransomware | valemany.com id36177 View details | United States | IT | pending | ||
|
valemany.com The company operates as both a wholesale and retail travel agency, providing travel planning, reservation and tour organization services to … 66 Learn More |
||||||
| Ransomware | ruscopackaging.com id36178 View details | Brazil | Manufacturing / Engineering | pending | ||
|
ruscopackaging.com Founded in 1972, the company specializes in supplying packaging materials, industrial equipment, replacement parts and technical services to manufacturing, warehousing, … 74 Learn More |
||||||
| Ransomware | deom.be id36071 View details | Belgium | IT | pending | ||
|
deom.be The company specializes in the distribution, installation, customization and maintenance of lifting equipment, truck-mounted cranes, forestry machinery and material-handling systems. … 2 Learn More |
||||||
| Ransomware | quevedo-ponce.com id36016 View details | Peru | Retail / E-commerce | leaked | ||
|
quevedo-ponce.com Headquartered in Quito, the firm serves domestic and international clients, including businesses, investors, entrepreneurs and multinational companies operating in Ecuador … Published 6436 Learn More |
||||||
| Ransomware | mars-semi.com.tw id36015 View details | Taiwan, Province of China | Manufacturing / Engineering | leaked | ||
|
mars-semi.com.tw Established in 2001 and headquartered in Hsinchu Science Park, the company develops long-range, high-bandwidth wireless audio and video system-on-chip (SoC) … Published 6552 Learn More |
||||||
| Ransomware | Rood Trucking id36014 View details | United States | Transportation / Travel / Logistics | leaked | ||
|
Rood Trucking Established in 1962 by George and Diane Rood Sr., the company developed from a single-truck operation into a regional carrier … Published 6528 Learn More |
||||||
| Ransomware | grifosespinoza.com id36013 View details | Brazil | Services | leaked | ||
|
grifosespinoza.com Headquartered in Lima, the company manages fuel stations that serve individual motorists, commercial customers and other transportation-related businesses. Its core … Published 6527 Learn More |
||||||
| Ransomware | jumonji-u.ac.jp id36012 View details | Japan | Education | leaked | ||
|
jumonji-u.ac.jp The institution is operated by Jumonji Gakuen Educational Corporation and focuses on providing undergraduate and postgraduate education in humanities, education, … Published 6830 Learn More |
||||||
| Ransomware | everon.com.ar id36011 View details | Argentina | Services | leaked | ||
|
everon.com.ar The company is headquartered in Resistencia, in Chaco Province, and specializes in providing fiber-optic internet connectivity to residential customers and … Published 6831 Learn More |
||||||
| Ransomware | goldencrops.com.tw id36010 View details | Taiwan, Province of China | Retail / E-commerce | leaked | ||
|
goldencrops.com.tw The company specializes in grain-based foods, nutritional products, plant-based foods and customized food manufacturing services. It operates three factories in … Published 6861 Learn More |
||||||
| Ransomware | layam.com id36009 View details | United States | Services | leaked | ||
|
layam.com Its product portfolio includes food and provisions, beverages, tobacco products, perfumes, cosmetics, electronics, confectionery, gifts and other duty-free merchandise. The … Published 7027 Learn More |
||||||
| Ransomware | uaa.mx id36003 View details | Mexico | Other | leaked | ||
|
uaa.mx It provides undergraduate and postgraduate education across a broad range of academic disciplines, including engineering, natural sciences, health sciences, social … Published 7210 Learn More |
||||||
| Ransomware | hiqbio.com id33788 View details | United States | — | leaked | ||
|
The company focuses on applying marine biotechnology to human health, animal health, functional foods and sustainable aquaculture. Its official website … |
||||||
| Ransomware | hoteldelfinolugano.ch id33664 View details | Switzerland | — | leaked | ||
|
The hotel was founded in 1972 and has been managed directly by the Haas family for four generations. Since 2001, … |
||||||
| Ransomware | dwi-bau.de id33665 View details | Germany | — | pending | ||
|
The company specializes in building systems for metal roofs and facades, serving customers in the construction and building sectors. Its … |
||||||
| Ransomware | dd-automation.ch id33485 View details | Switzerland | Manufacturing / Engineering | leaked | ||
|
The company was entered into the Swiss commercial register in 1997 and specializes in electrical engineering, automation systems, conveyor technology, … |
||||||
| Ransomware | stuecheli.ch id33486 View details | Switzerland | Retail / E-commerce | pending | ||
|
The firm was founded by architect Werner Stücheli in 1946 and has developed into a third-generation architectural practice. It is … |
||||||
| Ransomware | bwi-bau.de id33487 View details | Germany | Manufacturing / Engineering | pending | ||
|
The organization was established in October 1964 as a subsidiary of the Construction Industry Association of North Rhine-Westphalia. It originally … |
||||||
| Ransomware | halservice.it id33488 View details | Italy | IT | leaked | ||
|
Established in 1990, the company initially focused on system integration and information-technology services and later expanded into telecommunications following the … |
||||||
| Ransomware | grundens.com id33489 View details | United States | Other | leaked | ||
|
The company's origins can be traced to 1911, when Carl A. Grundén, the son of a fisherman from Grundsund on … |
||||||
| Ransomware | t-systems.com id33490 View details | Germany | IT | leaked | ||
|
Headquartered in Germany, the company operates internationally and has locations in 26 countries, employing more than 26,000 people. T-Systems specializes … |
||||||
| Ransomware | anwo.cl id33481 View details | Chile | Services | leaked | ||
|
The company was established in 1984 by Víctor Herrmann and has developed into one of the major HVAC distribution businesses … |
||||||
| Ransomware | duhaas.sk id33482 View details | Slovakia | Services | leaked | ||
|
The company was subsequently transformed into a limited liability company in 1992 and established as a joint-stock company in 1994. … |
||||||
| Ransomware | ikhasas.com id33483 View details | Malaysia | IT | leaked | ||
|
The group was incorporated as iKHASAS Sdn. Bhd. in 2008 and subsequently expanded beyond construction into property development, hospitality, plantation, … |
||||||
| Ransomware | sterrer.net id33484 View details | Netherlands | IT | leaked | ||
|
The company has operated since 1979 and combines agricultural production with technical services for commercial poultry farms. Its activities include … |
||||||
| Ransomware | wolfusofsky.de id33356 View details | Germany | Services | leaked | ||
|
The group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate, Saarland, neighboring … |
||||||
| Ransomware | econ-tec.com id33337 View details | Germany | Services | leaked | ||
|
The company focuses on designing technical systems for industrial customers, combining engineering expertise with process optimization, automation and energy-efficient production … |
||||||
| Ransomware | assist2enjoy.be id33338 View details | Belgium | null | pending | ||
|
The company was established in 2015 and operates primarily in the wholesale and retail market for electrical household appliances. Its … |
||||||
| Ransomware | manno.ch id33234 View details | Switzerland | IT | leaked | ||
|
The official website, manno.ch, provides residents, businesses and visitors with information about municipal administration, public services, local regulations, infrastructure, cultural … |
||||||
| Ransomware | auromex.com id33235 View details | Mexico | Manufacturing / Engineering | pending | ||
|
The company is headquartered in Samut Prakan Province and has more than five decades of experience in the surface-finishing industry. … |
||||||
| Ransomware | cromados.com id33236 View details | Spain | Manufacturing / Engineering | leaked | ||
|
The company's registered business activities include thermal treatment of metals, organic and electrolytic coatings, and the manufacture and commercialization of … |
||||||
| Ransomware | lfgholding.com id33227 View details | Switzerland | Other | leaked | ||
|
The company operates as an independent, partner-owned wealth-management group and manages a portfolio of specialized financial-services businesses. Its operating companies … |
||||||
| Ransomware | fedelmundo.com.ph id33228 View details | Philippines | Communication / Marketing | leaked | ||
|
The institution traces its origins to 1957, when Filipino pediatrician and scientist Dr. Fe del Mundo established Children's Memorial Hospital … |
||||||
| Ransomware | bio-strath.com id33229 View details | Switzerland | Healthcare / Pharma | leaked | ||
|
The company was established in 1961 and operates the Bio-Strath brand, which is particularly associated with liquid and tablet nutritional … |
||||||
| Ransomware | sumperk.cz id33230 View details | Czechia | Retail / E-commerce | leaked | ||
|
The official website, sumperk.cz, serves as the city's principal digital information and service portal for residents, businesses, visitors and other … |
||||||
| Ransomware | eagroep.com id33231 View details | Belgium | Agriculture / Food | leaked | ||
|
The group is headquartered in Deventer, Overijssel, and brings together several specialized business units operating in areas such as career … |
||||||
| Ransomware | Holiday Inn Vilnius id33232 View details | Lithuania | Hospitality / Food & Beverage / Tourism | leaked | ||
|
The property operates under the international Holiday Inn brand of IHG Hotels & Resorts. The hotel provides 134 guest rooms, … |
||||||
| Ransomware | marlinhvac.com id32878 View details | United States | Services | leaked | ||
|
Founded in 1989 by Michael and Richard Pellino, the company has developed more than three decades of experience in mechanical … |
||||||
| Ransomware | neumerkel-gmbh.de id32879 View details | Germany | Manufacturing / Engineering | leaked | ||
|
The business traces its origins to 1963 and has operated under the Neumerkel GmbH name since 1994. Its product portfolio … |
||||||
| Ransomware | triniticaring.org id32880 View details | United States | NGOs / Associations | pending | ||
|
The organization is jointly owned by Guardian Angels Senior Services of Elk River and Cassia, an Augustana/Elim affiliation. Its headquarters … |
||||||
| Ransomware | laconcepcion.com.mx id32881 View details | Mexico | Agriculture / Food | leaked | ||
|
The organization identifies itself as one of the principal private healthcare providers in the region and serves patients from Coahuila … |
||||||
| Ransomware | meterex.com id32882 View details | Germany | Manufacturing / Engineering | leaked | ||
|
The company is headquartered in Langenfeld, North Rhine-Westphalia, and is legally registered as Karl Kuntze (GmbH & Co.), HRA 16336 … |
||||||
| Ransomware | stoecklin-kuechen.ch id32883 View details | Switzerland | Retail / E-commerce | leaked | ||
|
The company is based in Aesch near Basel and has developed from a traditional carpentry business founded by Ernst Stöcklin … |
||||||
| Ransomware | ryomo.co.jp id32884 View details | Japan | IT | leaked | ||
|
Established in January 1970 as a regional computer-services center, the company has developed into a publicly listed systems integrator providing … |
||||||
| Ransomware | ara-lyss.ch id32885 View details | Switzerland | — | leaked | ||
|
Its headquarters and main wastewater-treatment facility are located at Industriering 28 in Lyss. The organization also operates the ARA Messen … |
||||||
| Ransomware | gob.pe id32886 View details | Peru | Public Sector | leaked | ||
|
It serves as the country's primary online point of contact between public institutions and citizens, providing government information, administrative procedures, … |
||||||
| Ransomware | compunnel.com id32763 View details | United States | IT | deleted | ||
|
The company provides a combination of talent acquisition, IT consulting, digital engineering, artificial intelligence, cybersecurity, and workforce management services to … |
||||||
| Ransomware | palmettoeyeinstitute.com id32693 View details | United States | Healthcare / Pharma | leaked | ||
|
The practice was founded by Dr. Prat Itharat, a board-certified ophthalmologist who specializes in cataract surgery and comprehensive eye care. … |
||||||
| Ransomware | reichenau.at id32694 View details | Austria | IT | leaked | ||
|
The official website, reichenau.at, serves as the municipality's central digital information and service platform for residents, businesses, and visitors. The … |
||||||
| Ransomware | cannonpuntana.com id32695 View details | Argentina | Retail / E-commerce | leaked | ||
|
The company operated in Argentina and was historically connected with the manufacture and distribution of fragrances, toiletries, and personal-care products. … |
||||||
| Ransomware | assiprime.it id32696 View details | Italy | Healthcare / Pharma | leaked | ||
|
The company provides insurance brokerage, risk-management, financial consulting, and related assistance services to private individuals, businesses, professionals, artisans, and commercial … |
||||||
| Ransomware | gayafores.es id32697 View details | Spain | Retail / E-commerce | leaked | ||
|
The company is headquartered in Onda, Castellón, one of Europe's most important ceramic manufacturing regions. Established in 1949, Gayafores has … |
||||||
| Ransomware | cenmar-manila.com id32698 View details | Philippines | Services | leaked | ||
|
The company was registered with the Philippine Securities and Exchange Commission in 1997 and received authorization to operate as a … |
||||||
| Ransomware | gsngestion.es id32699 View details | Spain | IT | leaked | ||
|
The company is based in Villaviciosa de Odón, Madrid, and operates through the GSN Gestión brand. Its website states that … |
||||||
| Ransomware | hbpro.pt id32700 View details | Portugal | Services | leaked | ||
|
Established in 1994, the company has more than three decades of experience providing technology products, infrastructure, consulting, maintenance, and technical … |
||||||
| Ransomware | recoverycafe.org id32691 View details | United States | NGOs / Associations | leaked | ||
|
The organization was founded in 2003 and opened its first physical café in Seattle in 2004. Its approach is based … |
||||||
| Ransomware | mcnishsteel.com id32692 View details | Canada | Manufacturing / Engineering | leaked | ||
|
The company is headquartered in Edmonton, Alberta, and was founded in 1978 by William and Wallace McNish. It has developed … |
||||||
| Ransomware | industry.airliquide.kr id32128 View details | Korea, Republic of | Manufacturing / Engineering | pending | ||
|
Air Liquide has operated in South Korea for several decades and supplies essential gases and related technologies to major industries, … |
||||||
| Ransomware | lagegepesca.it id32085 View details | Italy | Agriculture / Food | pending | ||
|
Based in Lallio, near Bergamo in Lombardy, the company traces its origins to 1957, when Santo Gavazzi established a small … |
||||||
| Ransomware | granjarinya.com id31721 View details | Spain | Agriculture / Food | leaked | ||
|
Headquartered in Albal, Valencia, the family-owned company traces its origins to three generations of livestock farming. What began as a … |
||||||
| Ransomware | pradotuylaw.com id31191 View details | United States | Finance / Legal / Insurance | leaked | ||
|
The firm focuses on practice areas including personal injury, wrongful death, workplace harassment, business litigation, civil settlements, and environmental litigation. … |
||||||
| Ransomware | naskdoorinc.com id31192 View details | United States | IT | leaked | ||
|
Headquartered in West Chester, Pennsylvania, the company has served customers throughout southeastern Pennsylvania and northern Delaware for several decades. Although … |
||||||
| Ransomware | new-point.it id31193 View details | Italy | IT | leaked | ||
|
Headquartered in Signa, Florence, Italy, the company was founded in 2006 and has grown into one of Italy's established suppliers … |
||||||
| Ransomware | simonrack.com id31194 View details | Spain | IT | leaked | ||
|
Headquartered in Alfamén, Zaragoza, Spain, the company has been manufacturing metal shelving since 1964 and has become one of Europe's … |
||||||
| Ransomware | hanan-hov.co.il id31195 View details | Israel | Construction / Real Estate | deleted | ||
|
Headquartered in Neve Yamin, Israel, the company provides comprehensive logistics support for construction, infrastructure, industrial, and commercial projects throughout the … |
||||||
| Ransomware | azn.co.jp id31185 View details | Japan | Manufacturing / Engineering | leaked | ||
|
Founded in 1991, the company specializes in comprehensive asset management, inheritance planning, business succession consulting, real estate advisory services, and … |
||||||
| Ransomware | southshorerecycling.com id31186 View details | United States | Manufacturing / Engineering | leaked | ||
|
The company specializes in metal recycling, concrete and asphalt recycling, aggregate production, and construction waste processing for commercial, industrial, and … |
||||||
| Ransomware | cpu-ag.com id31187 View details | Germany | IT | leaked | ||
|
Founded in 1981 and headquartered in Friedberg, Bavaria, the company has more than four decades of experience developing specialized software … |
||||||
| Ransomware | multiaqua.com id31188 View details | United States | Agriculture / Food | pending | ||
|
Founded in 1999, the company specializes in the design, engineering, and production of air-cooled water chillers, heat pump chillers, hydronic … |
||||||
| Ransomware | zinorm.de id30991 View details | Germany | IT | pending | ||
|
Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serving customers … |
||||||
| Ransomware | moebelmayer.de id30992 View details | Germany | Retail / E-commerce | leaked | ||
|
Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serving customers … |
||||||
| Ransomware | paritaet-nrw.org id30993 View details | Germany | NGOs / Associations | pending | ||
|
Headquartered in Wuppertal, the organization represents approximately 3,100 legally independent member organizations operating more than 7,000 social institutions and services … |
||||||
| Ransomware | haugbuersten.de id30994 View details | Germany | Manufacturing / Engineering | leaked | ||
|
Although the company in its current industrial form was founded in 1962, its family-owned brush-making tradition dates back to 1836, … |
||||||
| Ransomware | landesmuseum.de id30995 View details | Germany | Public Sector | leaked | ||
|
Established in 1919, the museum preserves and presents more than 50,000 years of human cultural history, ranging from prehistoric artifacts … |
||||||
| Ransomware | hst.eu id30996 View details | Germany | — | pending | ||
|
Headquartered in Kressbronn am Bodensee, Germany, the company traces its mechanical engineering heritage back to 1950, while the original tea … |
||||||
| Ransomware | braywoodschool.co.uk id30997 View details | United Kingdom | — | pending | ||
|
Founded in 1858, the school has more than 165 years of educational history and serves children from early years through … |
||||||
| Ransomware | weier.org id30985 View details | Germany | Other | pending | ||
|
The company specializes in representing manufacturers of plumbing, heating, water treatment, pumping, drainage, and building services equipment throughout western Germany. … |
||||||
| Ransomware | bnpdist.com id30986 View details | United States | Finance / Legal / Insurance | pending | ||
|
Headquartered in New York City, the company has been operating since 1979 and supplies restaurants, hotels, retailers, and wine merchants … |
||||||
| Ransomware | upland.k12.ca.us id30831 View details | United States | Education | pending | ||
|
The district provides comprehensive education from kindergarten through twelfth grade and operates 14 schools, including elementary, junior high, and high … |
||||||
| Ransomware | gvsurgicalarts.com id30832 View details | United States | Healthcare / Pharma | pending | ||
|
Founded in 2004 by Dr. Brian R. Chisdak, the practice has grown into one of Montana's leading surgical centers and … |
||||||
| Ransomware | wdk.de id30710 View details | Germany | Finance / Legal / Insurance | leaked | ||
|
Founded in 1950 and headquartered in Frankfurt am Main, the organization serves as the central voice of German manufacturers of … |
||||||
| Ransomware | jaecklin-industrial.de id30711 View details | Germany | Manufacturing / Engineering | leaked | ||
|
Founded in 1935 by Julius Jäcklin, the company has developed from a regional machine repair workshop into a globally recognized … |
||||||
| Ransomware | lbb-treuhand.de id30712 View details | Germany | Finance / Legal / Insurance | pending | ||
|
The company specializes in tax consulting, auditing, accounting, payroll administration, financial reporting, and business advisory services for private individuals, self-employed … |
||||||
| Ransomware | timetex.de id30713 View details | Germany | Manufacturing / Engineering | leaked | ||
|
The company traces its origins to 1991, when the TimeTEX brand was acquired and expanded into a comprehensive supplier of … |
||||||
| Ransomware | stroebel-gruppe.de id30714 View details | Germany | Manufacturing / Engineering | leaked | ||
|
Headquartered in Langenzenn, Bavaria, the company was founded in 1978 by Gerlinde and Gerhard Ströbel and has grown from a … |
||||||
| Ransomware | industriesjaro.com id30715 View details | Canada | Manufacturing / Engineering | leaked | ||
|
Over several decades, Jaro has evolved from manufacturing telephone booths into a supplier of advanced outdoor enclosures, interactive kiosks, bus … |
||||||
| Ransomware | cenesco.de id30716 View details | Germany | IT | leaked | ||
|
Founded in 1998, the company provides comprehensive information technology solutions for small and medium-sized enterprises (SMEs), helping organizations modernize their … |
||||||
| Ransomware | acsmallmaxwell.com.au id30717 View details | Australia | Finance / Legal / Insurance | pending | ||
|
Founded in 1916 by Ambrose Cecil Small, the firm has provided professional accounting and financial services to businesses and individuals … |
||||||
| Ransomware | mende-grundbesitz.de id30718 View details | Germany | Construction / Real Estate | leaked | ||
|
Founded in 1994, the company specializes in the professional administration of residential, commercial, and mixed-use real estate throughout the Berlin … |
||||||
| Ransomware | shuttlemeadowcc.com id30525 View details | United States | Transportation / Travel / Logistics | pending | ||
|
Founded in 1917, the club is one of the oldest and most prestigious private golf clubs in New England. It … |
||||||
| Ransomware | matrixwebagency.com id30296 View details | United States | Communication / Marketing | leaked | ||
|
The company specializes in providing integrated digital solutions that help businesses improve their online visibility, customer engagement, and revenue growth. … |
||||||
| Ransomware | bmiprojects.de id30297 View details | Germany | Construction / Real Estate | pending | ||
|
Originally operating under the name Bez Marine Interiors GmbH, the company built on decades of experience in the maritime industry … |
||||||
| Ransomware | caritas-koblenz.de id30298 View details | Germany | NGOs / Associations | pending | ||
|
Headquartered in Koblenz, the association was founded in 1918 and has provided charitable and community-based services for more than a … |
||||||
| Ransomware | knobel-bau.de id30299 View details | Germany | Construction / Real Estate | leaked | ||
|
Founded in 1947, the company has grown from a small sand and gravel business established after the Second World War … |
||||||