- Victims · 7d9+9 vs prior week
- Victims · 30d22
- Victims · 90d66
- All-time (tracked)607since 2024-11-20
- Last post10-26 17:24UTC
- Estimated earnings—public reporting
Profile · grok-4.7 · updated Summaries by Vani AI
SafePay is a ransomware and data-extortion group first widely reported by security vendors in late 2024. Operators steal data, encrypt victim systems with a SafePay payload, and pressure payment by posting victims on a dedicated leak site. Open reporting describes a high tempo of opportunistic intrusions against mostly mid-sized organizations across regions and sectors, without a confirmed state sponsor or a reliably documented public affiliate program. Listing activity has continued into 2026; this dashboard records 75 listings since 2026-07-13, including 32 in 30 days and a last post on 2026-10-05. Attribution beyond the SafePay brand, and any total ransom revenue, remain unknown in public sources.
Tactics & tooling
- Initial access via exposed RDP or VPN and compromised or weak credentials
- Opportunistic use of unpatched internet-facing services; no CVE is consistently attributed in open sources
- Hands-on intrusion with data staging and exfiltration before encryption
- Deployment of a custom SafePay encryptor, primarily against Windows environments
- Double extortion using a victim leak site, deadlines, and threats to publish stolen data
- Attempts to impair endpoint security tools and backups
- Broad victim selection across many sectors rather than a single vertical
Targeted sectors
manufacturingconstructionprofessional serviceshealthcareeducationtechnology
Notable public victims
t-systems.com (leak-site claim), bwi-bau.de (leak-site claim), grundens.com (leak-site claim), dd-automation.ch (leak-site claim), econ-tec.com (leak-site claim)
Estimated earnings
No public figure.
Leak-site victims
607 posts · newest first| Victim | Discovered | Details |
|---|---|---|
| layam.com | · 6d ago | Its product portfolio includes food and provisions, beverages, tobacco products, perfumes, cosmetics, electronics, confectionery, gifts and other duty-free merchandise. The … |
| uaa.mx | · 6d ago | It provides undergraduate and postgraduate education across a broad range of academic disciplines, including engineering, natural sciences, health sciences, social … |
| quevedo-ponce.com | · 6d ago | Headquartered in Quito, the firm serves domestic and international clients, including businesses, investors, entrepreneurs and multinational companies operating in Ecuador … |
| mars-semi.com.tw | · 6d ago | Established in 2001 and headquartered in Hsinchu Science Park, the company develops long-range, high-bandwidth wireless audio and video system-on-chip (SoC) … |
| Rood Trucking | · 6d ago | Established in 1962 by George and Diane Rood Sr., the company developed from a single-truck operation into a regional carrier … |
| grifosespinoza.com | · 6d ago | Headquartered in Lima, the company manages fuel stations that serve individual motorists, commercial customers and other transportation-related businesses. Its core … |
| jumonji-u.ac.jp | · 6d ago | The institution is operated by Jumonji Gakuen Educational Corporation and focuses on providing undergraduate and postgraduate education in humanities, education, … |
| everon.com.ar | · 6d ago | The company is headquartered in Resistencia, in Chaco Province, and specializes in providing fiber-optic internet connectivity to residential customers and … |
| goldencrops.com.tw | · 6d ago | The company specializes in grain-based foods, nutritional products, plant-based foods and customized food manufacturing services. It operates three factories in … |
| hiqbio.com | · 19d ago | The company focuses on applying marine biotechnology to human health, animal health, functional foods and sustainable aquaculture. Its official website … |
| hoteldelfinolugano.ch | · 22d ago | The hotel was founded in 1972 and has been managed directly by the Haas family for four generations. Since 2001, … |
| dwi-bau.de | · 22d ago | The company specializes in building systems for metal roofs and facades, serving customers in the construction and building sectors. Its … |
| dd-automation.ch | · 26d ago | The company was entered into the Swiss commercial register in 1997 and specializes in electrical engineering, automation systems, conveyor technology, … |
| ikhasas.com | · 26d ago | The group was incorporated as iKHASAS Sdn. Bhd. in 2008 and subsequently expanded beyond construction into property development, hospitality, plantation, … |
| sterrer.net | · 26d ago | The company has operated since 1979 and combines agricultural production with technical services for commercial poultry farms. Its activities include … |
| stuecheli.ch | · 26d ago | The firm was founded by architect Werner Stücheli in 1946 and has developed into a third-generation architectural practice. It is … |
| bwi-bau.de | · 26d ago | The organization was established in October 1964 as a subsidiary of the Construction Industry Association of North Rhine-Westphalia. It originally … |
| halservice.it | · 26d ago | Established in 1990, the company initially focused on system integration and information-technology services and later expanded into telecommunications following the … |
| grundens.com | · 26d ago | The company's origins can be traced to 1911, when Carl A. Grundén, the son of a fisherman from Grundsund on … |
| t-systems.com | · 26d ago | Headquartered in Germany, the company operates internationally and has locations in 26 countries, employing more than 26,000 people. T-Systems specializes … |
| anwo.cl | · 26d ago | The company was established in 1984 by Víctor Herrmann and has developed into one of the major HVAC distribution businesses … |
| duhaas.sk | · 26d ago | The company was subsequently transformed into a limited liability company in 1992 and established as a joint-stock company in 1994. … |
| wolfusofsky.de | · Sep 30, 2026 | The group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate, Saarland, neighboring … |
| econ-tec.com | · Sep 30, 2026 | The company focuses on designing technical systems for industrial customers, combining engineering expertise with process optimization, automation and energy-efficient production … |
| assist2enjoy.be | · Sep 30, 2026 | The company was established in 2015 and operates primarily in the wholesale and retail market for electrical household appliances. Its … |
| lfgholding.com | · Sep 28, 2026 | The company operates as an independent, partner-owned wealth-management group and manages a portfolio of specialized financial-services businesses. Its operating companies … |
| fedelmundo.com.ph | · Sep 28, 2026 | The institution traces its origins to 1957, when Filipino pediatrician and scientist Dr. Fe del Mundo established Children's Memorial Hospital … |
| bio-strath.com | · Sep 28, 2026 | The company was established in 1961 and operates the Bio-Strath brand, which is particularly associated with liquid and tablet nutritional … |
| sumperk.cz | · Sep 28, 2026 | The official website, sumperk.cz, serves as the city's principal digital information and service portal for residents, businesses, visitors and other … |
| eagroep.com | · Sep 28, 2026 | The group is headquartered in Deventer, Overijssel, and brings together several specialized business units operating in areas such as career … |
| Holiday Inn Vilnius | · Sep 28, 2026 | The property operates under the international Holiday Inn brand of IHG Hotels & Resorts. The hotel provides 134 guest rooms, … |
| manno.ch | · Sep 28, 2026 | The official website, manno.ch, provides residents, businesses and visitors with information about municipal administration, public services, local regulations, infrastructure, cultural … |
| auromex.com | · Sep 28, 2026 | The company is headquartered in Samut Prakan Province and has more than five decades of experience in the surface-finishing industry. … |
| cromados.com | · Sep 28, 2026 | The company's registered business activities include thermal treatment of metals, organic and electrolytic coatings, and the manufacture and commercialization of … |
| marlinhvac.com | · Sep 15, 2026 | Founded in 1989 by Michael and Richard Pellino, the company has developed more than three decades of experience in mechanical … |
| neumerkel-gmbh.de | · Sep 15, 2026 | The business traces its origins to 1963 and has operated under the Neumerkel GmbH name since 1994. Its product portfolio … |
| triniticaring.org | · Sep 15, 2026 | The organization is jointly owned by Guardian Angels Senior Services of Elk River and Cassia, an Augustana/Elim affiliation. Its headquarters … |
| laconcepcion.com.mx | · Sep 15, 2026 | The organization identifies itself as one of the principal private healthcare providers in the region and serves patients from Coahuila … |
| meterex.com | · Sep 15, 2026 | The company is headquartered in Langenfeld, North Rhine-Westphalia, and is legally registered as Karl Kuntze (GmbH & Co.), HRA 16336 … |
| stoecklin-kuechen.ch | · Sep 15, 2026 | The company is based in Aesch near Basel and has developed from a traditional carpentry business founded by Ernst Stöcklin … |
| ryomo.co.jp | · Sep 15, 2026 | Established in January 1970 as a regional computer-services center, the company has developed into a publicly listed systems integrator providing … |
| ara-lyss.ch | · Sep 15, 2026 | Its headquarters and main wastewater-treatment facility are located at Industriering 28 in Lyss. The organization also operates the ARA Messen … |
| gob.pe | · Sep 15, 2026 | It serves as the country's primary online point of contact between public institutions and citizens, providing government information, administrative procedures, … |
| compunnel.com | · Sep 12, 2026 | The company provides a combination of talent acquisition, IT consulting, digital engineering, artificial intelligence, cybersecurity, and workforce management services to … |
| gayafores.es | · Sep 9, 2026 | The company is headquartered in Onda, Castellón, one of Europe's most important ceramic manufacturing regions. Established in 1949, Gayafores has … |
| cenmar-manila.com | · Sep 9, 2026 | The company was registered with the Philippine Securities and Exchange Commission in 1997 and received authorization to operate as a … |
| gsngestion.es | · Sep 9, 2026 | The company is based in Villaviciosa de Odón, Madrid, and operates through the GSN Gestión brand. Its website states that … |
| hbpro.pt | · Sep 9, 2026 | Established in 1994, the company has more than three decades of experience providing technology products, infrastructure, consulting, maintenance, and technical … |
| recoverycafe.org | · Sep 8, 2026 | The organization was founded in 2003 and opened its first physical café in Seattle in 2004. Its approach is based … |
| mcnishsteel.com | · Sep 8, 2026 | The company is headquartered in Edmonton, Alberta, and was founded in 1978 by William and Wallace McNish. It has developed … |
In the news
AllVictim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .