Ransomware Group intelligence

Safepay

Active

Track Safepay with 570 published victims and 5 known leak locations in a single intelligence view.

Victims 570 Known published victims in this dataset
First discovered 2024-11-19 Earliest victim discovery date
Last discovered 2026-07-27 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 212 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Safepay is tracked by Breach House as a ransomware group with 570 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion
    Leak location 2 Onion service Unknown cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion
    Leak location 3 Onion service Unknown nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion
    Leak location 4 Onion service Unknown j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion
    Leak location 5 Onion service Unknown safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (570)

    Search, filter and paginate the victim timeline for Safepay. Showing 301–400 of 570.

    Type Target Discovered Country Business Category Intel Link
    Ransomware havtechpa.com id21385 View details United States IT
    Ransomware appagroup.com id21384 View details Germany Construction / Real Estate
    Ransomware briar-group.com id21383 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware teamsignal.com id21382 View details United States Communication / Marketing
    Ransomware blueridgesl.com id21325 View details United States Other
    Ransomware rhschool.org id21324 View details United States Education
    Ransomware qtmi.net id21323 View details United States Other
    Ransomware horanbarker.com id21322 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware naxis.net id21321 View details Japan Other
    Ransomware landwwilson.co.uk id21320 View details United Kingdom Other
    Ransomware salemma.com.py id21319 View details Paraguay Other
    Ransomware stichtingjohannesbosco.com id21318 View details Netherlands Other
    Ransomware bisa.com.pe id21317 View details Peru Services
    Ransomware norpak.com id21239 View details Canada Communication / Marketing
    Ransomware ashland.k12.ma.us id21206 View details United States Other
    Ransomware divgroup.eu id21205 View details Slovakia Services
    Ransomware hlb.ie id21204 View details Ireland Other
    Ransomware palmasdelixcan.com id21203 View details Mexico Other
    Ransomware accademia.it id21202 View details Italy Other
    Ransomware nod.ro id21120 View details Romania Other
    Ransomware bartec.com id21119 View details Germany IT
    Ransomware silverdalebc.com id21043 View details United States Other
    Ransomware chirurgiemaxillo.com id21042 View details Canada Other
    Ransomware lowcostspayneuterindiana.org id21041 View details United States Communication / Marketing
    Ransomware avgouleaschool.gr id21040 View details Greece Education
    Ransomware lewis-manning.org.uk id21039 View details United Kingdom Other
    Ransomware wmat.nsn.us id21038 View details United States Other
    Ransomware cascobay.org id21037 View details United States Communication / Marketing
    Ransomware profile-ind.com id21036 View details United States Communication / Marketing
    Ransomware relucent.com id21035 View details United States Other
    Ransomware fmsarchitects.com id21034 View details United States Construction / Real Estate
    Ransomware ppa-eng.com.org id21033 View details Other
    Ransomware caredig.co.uk id21032 View details United Kingdom Other
    Ransomware dossenterprises.com id20928 View details United States Communication / Marketing
    Ransomware lafayettefamilyymca.org id20927 View details United States Communication / Marketing
    Ransomware jansen-aschendorf.de id20926 View details Germany Other
    Ransomware tdunhamcpa.com id20809 View details United States Communication / Marketing
    Ransomware mccn.org id20783 View details United States Other
    Ransomware mlderm.com id20781 View details United States Communication / Marketing
    Ransomware membersourcecu.org id20715 View details United States Finance / Legal / Insurance
    Ransomware macedonia.oh.us id20708 View details United States Other
    Ransomware codesco.com id20665 View details Germany IT
    Ransomware packagesteel.com id20664 View details United States Manufacturing / Engineering
    Ransomware hohmannoilandplumbing.com id20662 View details United States Energy
    Ransomware cs-groupllc.com id20661 View details United States Services
    Ransomware pzsarchitects.com id20660 View details Finland Healthcare / Pharma
    Ransomware welcometosedgebrook.com id20659 View details United States Other
    Ransomware moffett-towers-club.com id20658 View details United States Other
    Ransomware liberty-township.com id20657 View details United States Other
    Ransomware mcsl.de id20656 View details Germany Other
    Ransomware rusindustries.com id20655 View details Russian Federation Other
    Ransomware theoverheaddoorco.com id20654 View details United States Communication / Marketing
    Ransomware awo-giessen.org id20653 View details Germany Other
    Ransomware realschule-karlstadt.org id20652 View details Germany Other
    Ransomware bristolhose.com id20651 View details United States Manufacturing / Engineering
    Ransomware ramlaw.com id20640 View details United States Finance / Legal / Insurance
    Ransomware electro-seal.com id20545 View details United States Services
    Ransomware mytaac.com id20530 View details United States Other
    Ransomware mercercapital.com id20529 View details United States Services
    Ransomware triangleheatingcooling.com id20528 View details United States Communication / Marketing
    Ransomware Myer Auto id20420 View details Australia Other
    Ransomware ochsinc.org.com id20419 View details United States Services
    Ransomware digitalwarroom.com id20418 View details United States IT
    Ransomware universityacademy.org id20374 View details United States Education
    Ransomware meeksgroup.com id20359 View details United States Communication / Marketing
    Ransomware sfhumanesociety.org id20358 View details United States NGOs / Associations
    Ransomware donowentire.com id20357 View details United States Communication / Marketing
    Ransomware iicil.com id20356 View details United States Other
    Ransomware visco.de id20355 View details Germany Communication / Marketing
    Ransomware buechel-online.com id20354 View details Germany Other
    Ransomware ibague.losolivos.co id20335 View details Colombia Communication / Marketing
    Ransomware Avance Agricola sl id20334 View details Spain Agriculture / Food
    Ransomware murraybuildingcompany.com id20333 View details United States Construction / Real Estate
    Ransomware sander-doll.com id20332 View details Germany Other
    Ransomware usmortgage.com id20331 View details United States Communication / Marketing
    Ransomware gruposancristobal.com.mx id20313 View details Mexico Other
    Ransomware radsports.com id20312 View details United States Other
    Ransomware schoenundendres.de id20311 View details Germany Other
    Ransomware hennertanklines.com id20310 View details United States Other
    Ransomware bridgecast.ca id20304 View details Canada Other
    Ransomware codylawfirm.com id20303 View details United States Finance / Legal / Insurance
    Ransomware spring-green.com/petbutler.com id20302 View details United States Communication / Marketing
    Ransomware paynecountyok.gov id20301 View details United States Public Sector
    Ransomware labbeemint.com id20260 View details United States Communication / Marketing
    Ransomware servicecentermetals.com id20259 View details United States Manufacturing / Engineering
    Ransomware ozarkah2o.com id20258 View details United States Communication / Marketing
    Ransomware gjszlin.cz id20257 View details Czechia Other
    Ransomware lrcpa.com id20256 View details United States Other
    Ransomware estudiolm.com.ar id20255 View details Argentina Communication / Marketing
    Ransomware dcbflegal.com id20250 View details United States Finance / Legal / Insurance
    Ransomware rtblegal.com.au id20249 View details Australia Finance / Legal / Insurance
    Ransomware notar-roemer-troisdorf.de id20176 View details Germany Other
    Ransomware rgvengineering.co.uk id20175 View details United Kingdom Manufacturing / Engineering
    Ransomware servicedecorating.com id20174 View details United States Other
    Ransomware ctd-dortmund.de id20173 View details Germany Other
    Ransomware planet-itservices.com id20172 View details India Services
    Ransomware dawg-dok.de id20171 View details Germany Other
    Ransomware proctorlane.com id20170 View details United States Communication / Marketing
    Ransomware sb-p.de id20169 View details Germany Other
    Ransomware schoene-aussicht-kassel.de id20168 View details Germany Other