Ransomware Group intelligence

Safepay

Active

Track Safepay with 588 published victims and 5 known leak locations in a single intelligence view.

Victims 588 Known published victims in this dataset
First discovered 2024-11-19 Earliest victim discovery date
Last discovered 2026-08-03 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 220 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Safepay is tracked by Breach House as a ransomware group with 588 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion
    Leak location 2 Onion service Unknown cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion
    Leak location 3 Onion service Unknown nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion
    Leak location 4 Onion service Unknown j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion
    Leak location 5 Onion service Unknown safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (588)

    Search, filter and paginate the victim timeline for Safepay. Showing 101–200 of 588.

    Type Target Discovered Country Business Category Intel Link
    Ransomware soraris.it id29550 View details Italy IT
    Ransomware lcnet.eu id29551 View details Germany IT
    Ransomware verzolla.com id29552 View details Italy Other
    Ransomware compactmould.com id29553 View details Canada Manufacturing / Engineering
    Ransomware eitecpro.co.jp id29514 View details Japan Other
    Ransomware tme-rusta.de id29515 View details Germany Manufacturing / Engineering
    Ransomware cyuou.com id29516 View details Japan Communication / Marketing
    Ransomware vdmtrucking.com id29517 View details Canada Other
    Ransomware olipes.com id29276 View details Spain Manufacturing / Engineering
    Ransomware harrisoncountywv.com id29229 View details United States Other
    Ransomware printroom.co.uk id29230 View details United Kingdom Other
    Ransomware hautarzt-budihardja.de id29231 View details Germany Healthcare / Pharma
    Ransomware mediafrance.de id29232 View details Germany Other
    Ransomware ashleytimber.co.uk id29233 View details United Kingdom Other
    Ransomware adlan.com id29234 View details Canada IT
    Ransomware Berlinmobil.de id29226 View details Germany Education
    Ransomware smp.cat id28918 View details Spain Healthcare / Medicine
    Ransomware gingerichtrucking.com id28919 View details United States Transportation / Travel / Logistics
    Ransomware jmige.com id28920 View details United States Communication / Marketing
    Ransomware id-s.de id28923 View details Germany IT
    Ransomware mbk-gmbh.de id28924 View details Germany Manufacturing / Engineering
    Ransomware ettp.be id28925 View details Belgium Transportation / Travel / Logistics
    Ransomware studioubertazzi.it id28926 View details Italy Finance / Legal / Insurance
    Ransomware globalmerchservices.com id28927 View details United Kingdom Retail / E-commerce
    Ransomware soavegel.it id28928 View details Italy Agriculture / Food
    Ransomware hokuyo2006.co.jp id28867 View details Japan Construction / Real Estate
    Ransomware bootstransport.ca id28868 View details Canada Transportation / Travel / Logistics
    Ransomware dahlgrenscement.se id28869 View details Sweden Construction / Real Estate
    Ransomware maiadouro.pt id28870 View details Portugal Manufacturing / Engineering
    Ransomware zonaovest.to.it id28871 View details Italy Public Sector
    Ransomware fital-treppenlifte.de id28872 View details Germany Healthcare / Medicine
    Ransomware energyaction.com.au id28333 View details Australia Energy
    Ransomware hpk.hamburg id28334 View details Germany Finance / Legal / Insurance
    Ransomware bbalawgroup.com id28275 View details United States Finance / Legal / Insurance
    Ransomware firstcambodia.com.kh id28274 View details Cambodia IT
    Ransomware cheeky.com.ar id28273 View details Argentina Retail / E-commerce
    Ransomware abfall-kreis-kassel.de id28272 View details Germany Public Sector
    Ransomware genealogysa.org.au id28271 View details Australia NGOs / Associations
    Ransomware lynxprecast.co.uk id28270 View details United Kingdom Manufacturing / Engineering
    Ransomware thruwayplumbingservice.com id28269 View details United States Services
    Ransomware favellefavco.com id28268 View details Malaysia Manufacturing / Engineering
    Ransomware st-bernards.bham.sch.uk id28267 View details United Kingdom Education
    Ransomware academyhealth.org id27937 View details United States NGOs / Associations
    Ransomware brookercg.com id27395 View details United States Construction / Real Estate
    Ransomware tiefenbachergroup.com id27394 View details Germany Healthcare / Pharma
    Ransomware briwaycarriers.com id27393 View details Canada Agriculture / Food
    Ransomware mattandsteve.com id27392 View details Canada Manufacturing / Engineering
    Ransomware thenavigatorcompany.com id27391 View details Portugal Manufacturing / Engineering
    Ransomware smileteam.com.au id27140 View details Australia Healthcare / Pharma
    Ransomware ripobec.com id27037 View details Canada Agriculture / Food
    Ransomware Franz-Sales-Haus.de id27033 View details Germany Retail / E-commerce
    Ransomware atadler.com.sg id26366 View details Singapore Finance / Legal / Insurance
    Ransomware kres.cz id26365 View details Czechia Retail / E-commerce
    Ransomware groupepiche.ca id26364 View details Canada Construction / Real Estate
    Ransomware freidarothman.com id25835 View details United States Other
    Ransomware gsglobalresources.com id25753 View details United States Manufacturing / Engineering
    Ransomware lcpublishinggroup.com id25752 View details Italy Services
    Ransomware adifse.com.ar id25751 View details Argentina Retail / E-commerce
    Ransomware trulinemfg.com id25750 View details United States Manufacturing / Engineering
    Ransomware superiordrywall.com id25749 View details United States Other
    Ransomware interr.com id25748 View details United Kingdom Services
    Ransomware rlc.es id25730 View details Spain Transportation / Travel / Logistics
    Ransomware abcseamless.com id25607 View details United States Manufacturing / Engineering
    Ransomware wohnverbund-st-gertrud.de id25606 View details Germany Services
    Ransomware ipu.co.il id25605 View details Israel Manufacturing / Engineering
    Ransomware setex-textil.de id25217 View details Germany Communication / Marketing
    Ransomware davidrosenbakerysupply.com id25216 View details United States Other
    Ransomware knightgroup.co.uk id25215 View details United Kingdom Communication / Marketing
    Ransomware moorelumber.com id25214 View details United States Retail / E-commerce
    Ransomware usdaw.org.uk id25213 View details United Kingdom Retail / E-commerce
    Ransomware investigacionesmedicas.com id25212 View details Argentina Communication / Marketing
    Ransomware sproutnet.com id25211 View details United States Communication / Marketing
    Ransomware precisionaluminum.ca id25210 View details Canada Communication / Marketing
    Ransomware estrumar.es id25209 View details Spain Manufacturing / Engineering
    Ransomware pau.at id25188 View details Austria Communication / Marketing
    Ransomware heatcel.co.uk id25171 View details United Kingdom Manufacturing / Engineering
    Ransomware ryc.org id25170 View details United States Communication / Marketing
    Ransomware studioelad.it id25169 View details Italy Services
    Ransomware debralmorrison.com id25168 View details United States Communication / Marketing
    Ransomware hmpccpa.com id25167 View details United States Finance / Legal / Insurance
    Ransomware vanvenrooy.com id25166 View details Netherlands Manufacturing / Engineering
    Ransomware wadzeck-stiftung.de id25165 View details Germany Other
    Ransomware inpipeproducts.com id25164 View details United Kingdom Communication / Marketing
    Ransomware larosadelmonte.com id25163 View details United States Transportation / Travel / Logistics
    Ransomware polhun.pl id25081 View details Poland Manufacturing / Engineering
    Ransomware maxdream.tur.ar id25080 View details Argentina Transportation / Travel
    Ransomware 47club.jp id25079 View details Japan Retail / E-commerce
    Ransomware nhpsa.com.ar id25078 View details Argentina Retail / E-commerce
    Ransomware vitatrac.com.gt id25077 View details Guatemala Manufacturing / Engineering
    Ransomware eiconnect.com id25076 View details United States Communication / Marketing
    Ransomware massfd.org id25075 View details United States Other
    Ransomware cmac-llc.com id25073 View details United States Retail / E-commerce
    Ransomware envases-group.com id25072 View details United Kingdom Communication / Marketing
    Ransomware pellcityschools.net id25034 View details United States Education
    Ransomware rogitz.com id24953 View details United States Communication / Marketing
    Ransomware reger-zahntechnik.de id24952 View details Germany IT
    Ransomware springersjewelers.com id24951 View details United States Communication / Marketing
    Ransomware dfcsystems.de id24950 View details Germany IT
    Ransomware kenalex.ca id24949 View details Canada Construction / Real Estate
    Ransomware meyer-lift.de id24948 View details Germany Other