Ransomware Group intelligence

Safepay

Active

Track Safepay with 588 published victims and 5 known leak locations in a single intelligence view.

Victims 588 Known published victims in this dataset
First discovered 2024-11-19 Earliest victim discovery date
Last discovered 2026-08-03 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 220 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Safepay is tracked by Breach House as a ransomware group with 588 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion
    Leak location 2 Onion service Unknown cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion
    Leak location 3 Onion service Unknown nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion
    Leak location 4 Onion service Unknown j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion
    Leak location 5 Onion service Unknown safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (588)

    Search, filter and paginate the victim timeline for Safepay. Showing 401–500 of 588.

    Type Target Discovered Country Business Category Intel Link
    Ransomware paynecountyok.gov id20301 View details United States Public Sector
    Ransomware labbeemint.com id20260 View details United States Communication / Marketing
    Ransomware servicecentermetals.com id20259 View details United States Manufacturing / Engineering
    Ransomware ozarkah2o.com id20258 View details United States Communication / Marketing
    Ransomware gjszlin.cz id20257 View details Czechia Other
    Ransomware lrcpa.com id20256 View details United States Other
    Ransomware estudiolm.com.ar id20255 View details Argentina Communication / Marketing
    Ransomware dcbflegal.com id20250 View details United States Finance / Legal / Insurance
    Ransomware rtblegal.com.au id20249 View details Australia Finance / Legal / Insurance
    Ransomware notar-roemer-troisdorf.de id20176 View details Germany Other
    Ransomware rgvengineering.co.uk id20175 View details United Kingdom Manufacturing / Engineering
    Ransomware servicedecorating.com id20174 View details United States Other
    Ransomware ctd-dortmund.de id20173 View details Germany Other
    Ransomware planet-itservices.com id20172 View details India Services
    Ransomware dawg-dok.de id20171 View details Germany Other
    Ransomware proctorlane.com id20170 View details United States Communication / Marketing
    Ransomware sb-p.de id20169 View details Germany Other
    Ransomware schoene-aussicht-kassel.de id20168 View details Germany Other
    Ransomware greenpac.com.sg id20116 View details Singapore Healthcare / Pharma
    Ransomware This entry has been removed following a request from the company. id20233 View details Singapore Services
    Ransomware mylikowines.co.uk id20115 View details United Kingdom Retail / E-commerce
    Ransomware ngca.net id20114 View details United States Other
    Ransomware distribution2.com id20113 View details Germany Other
    Ransomware redsquaredentalcare.com id20112 View details United Kingdom Healthcare / Pharma
    Ransomware overheadtyler.com id20111 View details United States Other
    Ransomware clarkmechanicalinc.com id20110 View details United States Services
    Ransomware prais.ro id20109 View details Romania Communication / Marketing
    Ransomware aplusmachining.com id20108 View details United States Communication / Marketing
    Ransomware freudenberg-cranes.com id20105 View details Germany Other
    Ransomware zvaonline.com id20093 View details Germany Other
    Ransomware olympusaero.com id20029 View details United States Communication / Marketing
    Ransomware azpiaran.com id20028 View details Spain IT
    Ransomware wnyenergy.com id20027 View details United States Energy
    Ransomware moorecoal.com id19979 View details United States Other
    Ransomware igpi.co.jp id19978 View details Japan Services
    Ransomware kize-weisser-stein.de id19977 View details Germany Other
    Ransomware lifesafeservices.com id19976 View details United States Services
    Ransomware gravelec.ch id19975 View details Switzerland Other
    Ransomware abfiad.nl id19974 View details Netherlands Other
    Ransomware join-the-quest.co.uk id19973 View details United Kingdom Other
    Ransomware maxusgroup.com id19972 View details Hong Kong Services
    Ransomware hagemann-h.de id19971 View details Germany Other
    Ransomware metten-maas.de id19970 View details Germany Other
    Ransomware scheuerle-stuttgart.de id19969 View details Germany Transportation / Travel / Logistics
    Ransomware gewandhaus.bayern id19968 View details Germany Communication / Marketing
    Ransomware morricetransportation.com id19967 View details United States Transportation / Travel / Logistics
    Ransomware eu-rec.de id19779 View details Germany Other
    Ransomware schapmann id19778 View details Germany Other
    Ransomware dosjm.com id19777 View details Hong Kong Other
    Ransomware biglevel.net id19776 View details United States Other
    Ransomware bloomfamilyeyesurgeons.com id19775 View details United States Communication / Marketing
    Ransomware kolpa.com.pe id19774 View details Peru Communication / Marketing
    Ransomware dreng.com id19773 View details United States Other
    Ransomware mooregiles.com id19772 View details United States Healthcare / Pharma
    Ransomware itec-gmbh.com id19218 View details Germany Construction / Real Estate
    Ransomware heinrich-steinhardt.de id19217 View details Germany Other
    Ransomware hurst-schroeder.de id19216 View details Germany Other
    Ransomware helixtools.co.uk id19215 View details United Kingdom Communication / Marketing
    Ransomware heilbronn.de id19214 View details Germany Other
    Ransomware getriebetech.de id19213 View details Germany IT
    Ransomware kirkel.de id19212 View details Germany Other
    Ransomware extremefire.com.au id19211 View details Australia Communication / Marketing
    Ransomware foerster-schwanau.de id19210 View details Germany Other
    Ransomware eichele-bau.de id19209 View details Germany Other
    Ransomware frapack.de id19208 View details Germany Manufacturing / Engineering
    Ransomware niemann.de id19205 View details Germany Communication / Marketing
    Ransomware creativeunited.org.uk id18835 View details United Kingdom Communication / Marketing
    Ransomware brightonaustralia.com.au id18834 View details Australia Other
    Ransomware tieraerzte-warburg.de id18833 View details Germany Other
    Ransomware system-toolsgmbh.de id18832 View details Germany Other
    Ransomware vinylvisions.com id18831 View details United States Communication / Marketing
    Ransomware estilointeriors.co.uk id18830 View details United Kingdom Healthcare / Pharma
    Ransomware swr.school id18829 View details Germany Education
    Ransomware albrecht-partner-steuerberatung.de id18828 View details Germany Communication / Marketing
    Ransomware alpsteel.com id18827 View details Türkiye Manufacturing / Engineering
    Ransomware blunk-gmbh.de id18826 View details Germany Agriculture / Food
    Ransomware cjs-buerodienstleistungen.de id18825 View details Germany Other
    Ransomware beaudry.ca id18824 View details Canada Other
    Ransomware bohrerhof.de id18823 View details Germany Agriculture / Food
    Ransomware metalogicinspection.com id18822 View details United States Manufacturing / Engineering
    Ransomware comfort.de id18821 View details Germany Other
    Ransomware vcvitanzasons.com id18820 View details United States Other
    Ransomware tramann.de id18819 View details Germany Other
    Ransomware schuhbode.de id18818 View details Germany Communication / Marketing
    Ransomware norson.com id18817 View details Mexico Construction / Real Estate
    Ransomware fd-friedrich.com id18816 View details Germany Other
    Ransomware westwarwickwelding.com id18815 View details United States Other
    Ransomware prestigeer.com id18814 View details United States Communication / Marketing
    Ransomware ecconstructors.com id18813 View details United States Communication / Marketing
    Ransomware wrm.org id18812 View details United States Other
    Ransomware retycol.com id18811 View details Colombia Other
    Ransomware marcom-inc.ca id18810 View details Canada Communication / Marketing
    Ransomware adolphelawgroup.com id18809 View details United States Finance / Legal / Insurance
    Ransomware wagner-transporte.com id18808 View details Germany Transportation / Travel / Logistics
    Ransomware children-ne.org.uk id18807 View details United Kingdom Other
    Ransomware mayaassurance.com id18806 View details United States Communication / Marketing
    Ransomware saiedu.fi id18709 View details Finland Education
    Ransomware compassionhealthcare.org id18600 View details Healthcare / Pharma
    Ransomware terrell.k12.ga.us id18472 View details United States Other
    Ransomware argusdatainsights.de id18423 View details Germany Communication / Marketing