Ransomware Group intelligence

Safepay

Active

Track Safepay with 570 published victims and 5 known leak locations in a single intelligence view.

Victims 570 Known published victims in this dataset
First discovered 2024-11-19 Earliest victim discovery date
Last discovered 2026-07-27 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 212 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Safepay is tracked by Breach House as a ransomware group with 570 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion
    Leak location 2 Onion service Unknown cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion
    Leak location 3 Onion service Unknown nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion
    Leak location 4 Onion service Unknown j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion
    Leak location 5 Onion service Unknown safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (570)

    Search, filter and paginate the victim timeline for Safepay. Showing 101–200 of 570.

    Type Target Discovered Country Business Category Intel Link
    Ransomware jmige.com id28920 View details United States Communication / Marketing
    Ransomware id-s.de id28923 View details Germany IT
    Ransomware mbk-gmbh.de id28924 View details Germany Manufacturing / Engineering
    Ransomware ettp.be id28925 View details Belgium Transportation / Travel / Logistics
    Ransomware studioubertazzi.it id28926 View details Italy Finance / Legal / Insurance
    Ransomware globalmerchservices.com id28927 View details United Kingdom Retail / E-commerce
    Ransomware soavegel.it id28928 View details Italy Agriculture / Food
    Ransomware hokuyo2006.co.jp id28867 View details Japan Construction / Real Estate
    Ransomware bootstransport.ca id28868 View details Canada Transportation / Travel / Logistics
    Ransomware dahlgrenscement.se id28869 View details Sweden Construction / Real Estate
    Ransomware maiadouro.pt id28870 View details Portugal Manufacturing / Engineering
    Ransomware zonaovest.to.it id28871 View details Italy Public Sector
    Ransomware fital-treppenlifte.de id28872 View details Germany Healthcare / Medicine
    Ransomware energyaction.com.au id28333 View details Australia Energy
    Ransomware hpk.hamburg id28334 View details Germany Finance / Legal / Insurance
    Ransomware bbalawgroup.com id28275 View details United States Finance / Legal / Insurance
    Ransomware firstcambodia.com.kh id28274 View details Cambodia IT
    Ransomware cheeky.com.ar id28273 View details Argentina Retail / E-commerce
    Ransomware abfall-kreis-kassel.de id28272 View details Germany Public Sector
    Ransomware genealogysa.org.au id28271 View details Australia NGOs / Associations
    Ransomware lynxprecast.co.uk id28270 View details United Kingdom Manufacturing / Engineering
    Ransomware thruwayplumbingservice.com id28269 View details United States Services
    Ransomware favellefavco.com id28268 View details Malaysia Manufacturing / Engineering
    Ransomware st-bernards.bham.sch.uk id28267 View details United Kingdom Education
    Ransomware academyhealth.org id27937 View details United States NGOs / Associations
    Ransomware brookercg.com id27395 View details United States Construction / Real Estate
    Ransomware tiefenbachergroup.com id27394 View details Germany Healthcare / Pharma
    Ransomware briwaycarriers.com id27393 View details Canada Agriculture / Food
    Ransomware mattandsteve.com id27392 View details Canada Manufacturing / Engineering
    Ransomware thenavigatorcompany.com id27391 View details Portugal Manufacturing / Engineering
    Ransomware smileteam.com.au id27140 View details Australia Healthcare / Pharma
    Ransomware ripobec.com id27037 View details Canada Agriculture / Food
    Ransomware Franz-Sales-Haus.de id27033 View details Germany Retail / E-commerce
    Ransomware atadler.com.sg id26366 View details Singapore Finance / Legal / Insurance
    Ransomware kres.cz id26365 View details Czechia Retail / E-commerce
    Ransomware groupepiche.ca id26364 View details Canada Construction / Real Estate
    Ransomware freidarothman.com id25835 View details United States Other
    Ransomware gsglobalresources.com id25753 View details United States Manufacturing / Engineering
    Ransomware lcpublishinggroup.com id25752 View details Italy Services
    Ransomware adifse.com.ar id25751 View details Argentina Retail / E-commerce
    Ransomware trulinemfg.com id25750 View details United States Manufacturing / Engineering
    Ransomware superiordrywall.com id25749 View details United States Other
    Ransomware interr.com id25748 View details United Kingdom Services
    Ransomware rlc.es id25730 View details Spain Transportation / Travel / Logistics
    Ransomware abcseamless.com id25607 View details United States Manufacturing / Engineering
    Ransomware wohnverbund-st-gertrud.de id25606 View details Germany Services
    Ransomware ipu.co.il id25605 View details Israel Manufacturing / Engineering
    Ransomware setex-textil.de id25217 View details Germany Communication / Marketing
    Ransomware davidrosenbakerysupply.com id25216 View details United States Other
    Ransomware knightgroup.co.uk id25215 View details United Kingdom Communication / Marketing
    Ransomware moorelumber.com id25214 View details United States Retail / E-commerce
    Ransomware usdaw.org.uk id25213 View details United Kingdom Retail / E-commerce
    Ransomware investigacionesmedicas.com id25212 View details Argentina Communication / Marketing
    Ransomware sproutnet.com id25211 View details United States Communication / Marketing
    Ransomware precisionaluminum.ca id25210 View details Canada Communication / Marketing
    Ransomware estrumar.es id25209 View details Spain Manufacturing / Engineering
    Ransomware pau.at id25188 View details Austria Communication / Marketing
    Ransomware heatcel.co.uk id25171 View details United Kingdom Manufacturing / Engineering
    Ransomware ryc.org id25170 View details United States Communication / Marketing
    Ransomware studioelad.it id25169 View details Italy Services
    Ransomware debralmorrison.com id25168 View details United States Communication / Marketing
    Ransomware hmpccpa.com id25167 View details United States Finance / Legal / Insurance
    Ransomware vanvenrooy.com id25166 View details Netherlands Manufacturing / Engineering
    Ransomware wadzeck-stiftung.de id25165 View details Germany Other
    Ransomware inpipeproducts.com id25164 View details United Kingdom Communication / Marketing
    Ransomware larosadelmonte.com id25163 View details United States Transportation / Travel / Logistics
    Ransomware polhun.pl id25081 View details Poland Manufacturing / Engineering
    Ransomware maxdream.tur.ar id25080 View details Argentina Transportation / Travel
    Ransomware 47club.jp id25079 View details Japan Retail / E-commerce
    Ransomware nhpsa.com.ar id25078 View details Argentina Retail / E-commerce
    Ransomware vitatrac.com.gt id25077 View details Guatemala Manufacturing / Engineering
    Ransomware eiconnect.com id25076 View details United States Communication / Marketing
    Ransomware massfd.org id25075 View details United States Other
    Ransomware cmac-llc.com id25073 View details United States Retail / E-commerce
    Ransomware envases-group.com id25072 View details United Kingdom Communication / Marketing
    Ransomware pellcityschools.net id25034 View details United States Education
    Ransomware rogitz.com id24953 View details United States Communication / Marketing
    Ransomware reger-zahntechnik.de id24952 View details Germany IT
    Ransomware springersjewelers.com id24951 View details United States Communication / Marketing
    Ransomware dfcsystems.de id24950 View details Germany IT
    Ransomware kenalex.ca id24949 View details Canada Construction / Real Estate
    Ransomware meyer-lift.de id24948 View details Germany Other
    Ransomware coloradopowerline.com id24947 View details United States Energy
    Ransomware peus-muenzen.de id24946 View details Germany Communication / Marketing
    Ransomware capsum.com id24945 View details United States Communication / Marketing
    Ransomware seguriamericas.com id24872 View details Colombia Retail / E-commerce
    Ransomware smilecenterutah.com id24871 View details United States Communication / Marketing
    Ransomware silverlinegroupinc.com id24870 View details Canada Construction / Real Estate
    Ransomware notar-gerresheim.de id24869 View details Germany Communication / Marketing
    Ransomware artcitydental.com id24868 View details United States Healthcare / Pharma
    Ransomware gandlmechanical.com id24867 View details United States Construction / Real Estate
    Ransomware zimeda.eu id24866 View details Germany Healthcare / Pharma
    Ransomware aspenviewacademy.org id24828 View details United States Education
    Ransomware feldmanandlopez.com id24827 View details United States Finance / Legal / Insurance
    Ransomware hoodriverdentist.com id24826 View details United States Healthcare / Pharma
    Ransomware seeberger-appel.de id24825 View details Germany Finance / Legal / Insurance
    Ransomware stadtwerke-clausthal.de id24824 View details Germany Public Sector
    Ransomware autohaus-paschke.de id24823 View details Germany Communication / Marketing
    Ransomware ernst-auto.de id24822 View details Germany Manufacturing / Engineering
    Ransomware teccart.qc.ca id24772 View details Canada Services