Ransomware Group intelligence

Safepay

Active

Track Safepay with 625 published victims and 5 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 625 Known published victims in this dataset
First discovered 2024-11-19 Earliest victim discovery date
Last discovered 2026-09-15 Latest victim discovery date
Inactive since 5 days Days since the latest known victim
Top country United States 228 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Safepay is tracked by Breach House as a ransomware group with 625 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 0 0.0%
  • Pending 568 99.6%
  • Deleted 2 0.4%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 5 Onion service Down checked 4h ago safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion
    Leak location 4 Onion service Down checked 4h ago j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion
    Leak location 1 Onion service Down checked 4h ago nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion
    Leak location 3 Onion service Down checked 4h ago nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion
    Leak location 2 Onion service Down checked 4h ago cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion

    Top Activity Sectors (16)

    Victims (625)

    Search, filter and paginate the victim timeline for Safepay. Showing 301–400 of 625.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware alliancesteelco.com id22461 View details United States Manufacturing / Engineering pending
    Ransomware slusarski.com id22460 View details United States Construction / Real Estate pending
    Ransomware drcloudemr.com id22459 View details United States IT pending
    Ransomware venetianassociates.com id22458 View details United States Finance / Legal / Insurance pending
    Ransomware armourhome.co.uk id22457 View details United Kingdom Services pending
    Ransomware biosorthopedics.com id22456 View details United States Communication / Marketing pending
    Ransomware gosheating.co.uk id22455 View details United Kingdom Construction / Real Estate pending
    Ransomware halbarstainless.com id22314 View details Canada Hospitality / Food & Beverage / Tourism pending
    Ransomware cityofmiddletown.org id22313 View details United States Public Sector pending
    Ransomware osdcourtks.org id22312 View details United States Public Sector pending
    Ransomware waverlychildcare.org id22263 View details United States Communication / Marketing pending
    Ransomware bthcpa.com id22082 View details United States Finance / Legal / Insurance pending
    Ransomware kclub.ie id22081 View details Ireland Hospitality / Food & Beverage / Tourism pending
    Ransomware usai.io id22080 View details United States IT pending
    Ransomware wilsonatllaw.com id22079 View details United States Finance / Legal / Insurance pending
    Ransomware scottschiff.com id22078 View details United States Finance / Legal / Insurance pending
    Ransomware mdneal.com id22077 View details United States Manufacturing / Engineering pending
    Ransomware umweltprofis.at id22074 View details Austria Communication / Marketing pending
    Ransomware waterfordsurgicalcenter.com id22073 View details United States Healthcare / Pharma pending
    Ransomware oiwky.com id22072 View details United States Services pending
    Ransomware sandersonmanagement.com id22052 View details United States Services pending
    Ransomware lipcare.de id22043 View details Germany Other pending
    Ransomware companionsandhomemakers.com id22042 View details United States Communication / Marketing pending
    Ransomware camaravalencia.com id22041 View details Spain Retail / E-commerce pending
    Ransomware dasmeshschool.com id22040 View details Canada Education pending
    Ransomware zanettisrl.it id22039 View details Italy Construction / Real Estate pending
    Ransomware uwock.ca id22038 View details Canada Communication / Marketing pending
    Ransomware hardwicktactical.com id22037 View details United States Communication / Marketing pending
    Ransomware templeemanu-el.org id22036 View details United States Other pending
    Ransomware thecelestehotel.com id22035 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware decor-metall.de id21999 View details Germany Manufacturing / Engineering pending
    Ransomware akd-ekbo.de id21950 View details Germany Education pending
    Ransomware jphrs-waghaeusel.de id21949 View details Germany Education pending
    Ransomware parksidegroup.co.uk id21948 View details United Kingdom Communication / Marketing pending
    Ransomware ferienwohnungen.de id21947 View details Germany Transportation / Travel / Logistics pending
    Ransomware phillips66lubricants.com id21946 View details United States Manufacturing / Engineering pending
    Ransomware faltner.de id21945 View details Germany Agriculture / Food pending
    Ransomware optivosa.com id21944 View details Mexico Communication / Marketing pending
    Ransomware rivertoncabinets.com id21943 View details United States Other pending
    Ransomware schliessmeyer.de id21942 View details Germany Manufacturing / Engineering pending
    Ransomware childrenscouncil.org id21837 View details United States Public Sector pending
    Ransomware albertaindustrialcontrols.com id21826 View details Canada Manufacturing / Engineering pending
    Ransomware listgrove.com id21825 View details United Kingdom Other pending
    Ransomware transelectric.co.il id21824 View details Israel Manufacturing / Engineering pending
    Ransomware batemangroundworks.co.uk id21823 View details United Kingdom Manufacturing / Engineering pending
    Ransomware godbyhearth.com id21822 View details United States Communication / Marketing pending
    Ransomware mauilodging.com id21628 View details United States Communication / Marketing pending
    Ransomware ridgefield.org id21539 View details United States Education pending
    Ransomware chamberlainhuckeriede.com id21492 View details United States Services pending
    Ransomware ingrammicro.com id21420 View details United States IT pending
    Ransomware tele-optics.com id21390 View details United States Other pending
    Ransomware appsnw.com id21389 View details United States Other pending
    Ransomware wta-inc.com id21388 View details United States Transportation / Travel / Logistics pending
    Ransomware bussepc.com id21387 View details Germany Other pending
    Ransomware swfldermatology.com id21386 View details United States Healthcare / Pharma pending
    Ransomware havtechpa.com id21385 View details United States IT pending
    Ransomware appagroup.com id21384 View details Germany Construction / Real Estate pending
    Ransomware briar-group.com id21383 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware teamsignal.com id21382 View details United States Communication / Marketing pending
    Ransomware blueridgesl.com id21325 View details United States Other pending
    Ransomware rhschool.org id21324 View details United States Education pending
    Ransomware qtmi.net id21323 View details United States Other pending
    Ransomware horanbarker.com id21322 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware naxis.net id21321 View details Japan Other pending
    Ransomware landwwilson.co.uk id21320 View details United Kingdom Other pending
    Ransomware salemma.com.py id21319 View details Paraguay Other pending
    Ransomware stichtingjohannesbosco.com id21318 View details Netherlands Other pending
    Ransomware bisa.com.pe id21317 View details Peru Services pending
    Ransomware norpak.com id21239 View details Canada Communication / Marketing pending
    Ransomware ashland.k12.ma.us id21206 View details United States Other pending
    Ransomware divgroup.eu id21205 View details Slovakia Services pending
    Ransomware hlb.ie id21204 View details Ireland Other pending
    Ransomware palmasdelixcan.com id21203 View details Mexico Other pending
    Ransomware accademia.it id21202 View details Italy Other pending
    Ransomware nod.ro id21120 View details Romania Other pending
    Ransomware bartec.com id21119 View details Germany IT pending
    Ransomware silverdalebc.com id21043 View details United States Other pending
    Ransomware chirurgiemaxillo.com id21042 View details Canada Other pending
    Ransomware lowcostspayneuterindiana.org id21041 View details United States Communication / Marketing pending
    Ransomware avgouleaschool.gr id21040 View details Greece Education pending
    Ransomware lewis-manning.org.uk id21039 View details United Kingdom Other pending
    Ransomware wmat.nsn.us id21038 View details United States Other pending
    Ransomware cascobay.org id21037 View details United States Communication / Marketing pending
    Ransomware profile-ind.com id21036 View details United States Communication / Marketing pending
    Ransomware relucent.com id21035 View details United States Other pending
    Ransomware fmsarchitects.com id21034 View details United States Construction / Real Estate pending
    Ransomware ppa-eng.com.org id21033 View details Other pending
    Ransomware caredig.co.uk id21032 View details United Kingdom Other pending
    Ransomware dossenterprises.com id20928 View details United States Communication / Marketing pending
    Ransomware lafayettefamilyymca.org id20927 View details United States Communication / Marketing pending
    Ransomware jansen-aschendorf.de id20926 View details Germany Other pending
    Ransomware tdunhamcpa.com id20809 View details United States Communication / Marketing pending
    Ransomware mccn.org id20783 View details United States Other pending
    Ransomware mlderm.com id20781 View details United States Communication / Marketing pending
    Ransomware membersourcecu.org id20715 View details United States Finance / Legal / Insurance pending
    Ransomware macedonia.oh.us id20708 View details United States Other pending
    Ransomware codesco.com id20665 View details Germany IT pending
    Ransomware packagesteel.com id20664 View details United States Manufacturing / Engineering pending
    Ransomware hohmannoilandplumbing.com id20662 View details United States Energy pending
    Ransomware cs-groupllc.com id20661 View details United States Services pending