Ransomware Group intelligence

Safepay

Active

Track Safepay with 570 published victims and 5 known leak locations in a single intelligence view.

Victims 570 Known published victims in this dataset
First discovered 2024-11-19 Earliest victim discovery date
Last discovered 2026-07-27 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 212 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Safepay is tracked by Breach House as a ransomware group with 570 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion
    Leak location 2 Onion service Unknown cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion
    Leak location 3 Onion service Unknown nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion
    Leak location 4 Onion service Unknown j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion
    Leak location 5 Onion service Unknown safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (570)

    Search, filter and paginate the victim timeline for Safepay. Showing 201–300 of 570.

    Type Target Discovered Country Business Category Intel Link
    Ransomware sbws.org.sg id24771 View details Singapore Services
    Ransomware fest-group.de id24770 View details Germany Manufacturing / Engineering
    Ransomware lampus.com id24769 View details United States Construction / Real Estate
    Ransomware inttrust.gr id24768 View details Greece IT
    Ransomware aysa.com.ar id24767 View details Argentina Retail / E-commerce
    Ransomware chemstress.com id24645 View details United States Communication / Marketing
    Ransomware mmc.de id24464 View details Germany Communication / Marketing
    Ransomware juliuskoch.com id24463 View details Germany Construction / Real Estate
    Ransomware untereisesheim.de id24462 View details Germany Public Sector
    Ransomware steuerberater-scheerer.de id24461 View details Germany Finance / Legal / Insurance
    Ransomware mactavishco.ca id24460 View details Canada Retail / E-commerce
    Ransomware barnet.com.au id24459 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware wachtmann.eu id24457 View details Germany Retail / E-commerce
    Ransomware becksgroup.au id24456 View details Australia Manufacturing / Engineering
    Ransomware hyperdomemedicalcentre.com.au id24455 View details Australia Healthcare / Pharma
    Ransomware dynamichomerepair.com id24176 View details United States Services
    Ransomware rehmann.de id24175 View details Germany Retail / E-commerce
    Ransomware istitutocomprensivo-cavaglia.edu.it id23984 View details Italy Communication / Marketing
    Ransomware puertoricowarehousing.com id23983 View details United States Construction / Real Estate
    Ransomware adesursas.com id23982 View details Colombia Agriculture / Food
    Ransomware aussenwelten.ch id23981 View details Switzerland Other
    Ransomware simmonsbb.com id23980 View details Barbados Hospitality / Food & Beverage / Tourism
    Ransomware killinglyschools.org id23907 View details United States Education
    Ransomware confortchem.com & rogitex.com id23845 View details Canada Manufacturing / Engineering
    Ransomware doversd.org id23826 View details United States Education
    Ransomware glendaleobgyn.com id23807 View details United States Healthcare / Pharma
    Ransomware himmelstein.com id23785 View details United States Construction / Real Estate
    Ransomware ielplumbing.com id23774 View details Canada Construction / Real Estate
    Ransomware mcintoshlabs.com id23613 View details United States Other
    Ransomware holtzofficesupport.com id23535 View details Germany Services
    Ransomware constructiondprovost.com id23336 View details Canada Construction / Real Estate
    Ransomware xortec.de id23335 View details Germany Services
    Ransomware mino-in.co.jp id23334 View details Japan Communication / Marketing
    Ransomware bannenbergandrowell.com id23333 View details United Kingdom Other
    Ransomware greenhouseapt.com id23332 View details United States Construction / Real Estate
    Ransomware healthandvitalitycenter.com id23220 View details United States Healthcare / Pharma
    Ransomware empirico-mr.com id22960 View details United States Other
    Ransomware tango-hotel.com.ar id22959 View details Argentina NGOs / Associations
    Ransomware bridgenetcommunicationsrgv.com id22958 View details United States Communication / Marketing
    Ransomware krne.com id22957 View details United States Finance / Legal / Insurance
    Ransomware glatten.de id22956 View details Germany Manufacturing / Engineering
    Ransomware portofuneralhomes.net id22955 View details United States Public Sector
    Ransomware ggw.net id22954 View details Canada Finance / Legal / Insurance
    Ransomware cmlmachinery.com id22953 View details Canada Manufacturing / Engineering
    Ransomware browneco.com id22462 View details United States Agriculture / Food
    Ransomware alliancesteelco.com id22461 View details United States Manufacturing / Engineering
    Ransomware slusarski.com id22460 View details United States Construction / Real Estate
    Ransomware drcloudemr.com id22459 View details United States IT
    Ransomware venetianassociates.com id22458 View details United States Finance / Legal / Insurance
    Ransomware armourhome.co.uk id22457 View details United Kingdom Services
    Ransomware biosorthopedics.com id22456 View details United States Communication / Marketing
    Ransomware gosheating.co.uk id22455 View details United Kingdom Construction / Real Estate
    Ransomware halbarstainless.com id22314 View details Canada Hospitality / Food & Beverage / Tourism
    Ransomware cityofmiddletown.org id22313 View details United States Public Sector
    Ransomware osdcourtks.org id22312 View details United States Public Sector
    Ransomware waverlychildcare.org id22263 View details United States Communication / Marketing
    Ransomware bthcpa.com id22082 View details United States Finance / Legal / Insurance
    Ransomware kclub.ie id22081 View details Ireland Hospitality / Food & Beverage / Tourism
    Ransomware usai.io id22080 View details United States IT
    Ransomware wilsonatllaw.com id22079 View details United States Finance / Legal / Insurance
    Ransomware scottschiff.com id22078 View details United States Finance / Legal / Insurance
    Ransomware mdneal.com id22077 View details United States Manufacturing / Engineering
    Ransomware umweltprofis.at id22074 View details Austria Communication / Marketing
    Ransomware waterfordsurgicalcenter.com id22073 View details United States Healthcare / Pharma
    Ransomware oiwky.com id22072 View details United States Services
    Ransomware sandersonmanagement.com id22052 View details United States Services
    Ransomware lipcare.de id22043 View details Germany Other
    Ransomware companionsandhomemakers.com id22042 View details United States Communication / Marketing
    Ransomware camaravalencia.com id22041 View details Spain Retail / E-commerce
    Ransomware dasmeshschool.com id22040 View details Canada Education
    Ransomware zanettisrl.it id22039 View details Italy Construction / Real Estate
    Ransomware uwock.ca id22038 View details Canada Communication / Marketing
    Ransomware hardwicktactical.com id22037 View details United States Communication / Marketing
    Ransomware templeemanu-el.org id22036 View details United States Other
    Ransomware thecelestehotel.com id22035 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware decor-metall.de id21999 View details Germany Manufacturing / Engineering
    Ransomware akd-ekbo.de id21950 View details Germany Education
    Ransomware jphrs-waghaeusel.de id21949 View details Germany Education
    Ransomware parksidegroup.co.uk id21948 View details United Kingdom Communication / Marketing
    Ransomware ferienwohnungen.de id21947 View details Germany Transportation / Travel
    Ransomware phillips66lubricants.com id21946 View details United States Manufacturing / Engineering
    Ransomware faltner.de id21945 View details Germany Agriculture / Food
    Ransomware optivosa.com id21944 View details Mexico Communication / Marketing
    Ransomware rivertoncabinets.com id21943 View details United States Other
    Ransomware schliessmeyer.de id21942 View details Germany Manufacturing / Engineering
    Ransomware childrenscouncil.org id21837 View details United States Public Sector
    Ransomware albertaindustrialcontrols.com id21826 View details Canada Manufacturing / Engineering
    Ransomware listgrove.com id21825 View details United Kingdom Other
    Ransomware transelectric.co.il id21824 View details Israel Manufacturing / Engineering
    Ransomware batemangroundworks.co.uk id21823 View details United Kingdom Manufacturing / Engineering
    Ransomware godbyhearth.com id21822 View details United States Communication / Marketing
    Ransomware mauilodging.com id21628 View details United States Communication / Marketing
    Ransomware ridgefield.org id21539 View details United States Education
    Ransomware chamberlainhuckeriede.com id21492 View details United States Services
    Ransomware ingrammicro.com id21420 View details United States IT
    Ransomware tele-optics.com id21390 View details United States Other
    Ransomware appsnw.com id21389 View details United States Other
    Ransomware wta-inc.com id21388 View details United States Transportation / Travel
    Ransomware bussepc.com id21387 View details Germany Other
    Ransomware swfldermatology.com id21386 View details United States Healthcare / Pharma