Ransomware Group intelligence

Safepay

Active

Track Safepay with 570 published victims and 5 known leak locations in a single intelligence view.

Victims 570 Known published victims in this dataset
First discovered 2024-11-19 Earliest victim discovery date
Last discovered 2026-07-27 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 212 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Safepay is tracked by Breach House as a ransomware group with 570 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion
    Leak location 2 Onion service Unknown cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion
    Leak location 3 Onion service Unknown nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion
    Leak location 4 Onion service Unknown j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion
    Leak location 5 Onion service Unknown safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (570)

    Search, filter and paginate the victim timeline for Safepay. Showing 401–500 of 570.

    Type Target Discovered Country Business Category Intel Link
    Ransomware greenpac.com.sg id20116 View details Singapore Healthcare / Pharma
    Ransomware This entry has been removed following a request from the company. id20233 View details Singapore Services
    Ransomware mylikowines.co.uk id20115 View details United Kingdom Retail / E-commerce
    Ransomware ngca.net id20114 View details United States Other
    Ransomware distribution2.com id20113 View details Germany Other
    Ransomware redsquaredentalcare.com id20112 View details United Kingdom Healthcare / Pharma
    Ransomware overheadtyler.com id20111 View details United States Other
    Ransomware clarkmechanicalinc.com id20110 View details United States Services
    Ransomware prais.ro id20109 View details Romania Communication / Marketing
    Ransomware aplusmachining.com id20108 View details United States Communication / Marketing
    Ransomware freudenberg-cranes.com id20105 View details Germany Other
    Ransomware zvaonline.com id20093 View details Germany Other
    Ransomware olympusaero.com id20029 View details United States Communication / Marketing
    Ransomware azpiaran.com id20028 View details Spain IT
    Ransomware wnyenergy.com id20027 View details United States Energy
    Ransomware moorecoal.com id19979 View details United States Other
    Ransomware igpi.co.jp id19978 View details Japan Services
    Ransomware kize-weisser-stein.de id19977 View details Germany Other
    Ransomware lifesafeservices.com id19976 View details United States Services
    Ransomware gravelec.ch id19975 View details Switzerland Other
    Ransomware abfiad.nl id19974 View details Netherlands Other
    Ransomware join-the-quest.co.uk id19973 View details United Kingdom Other
    Ransomware maxusgroup.com id19972 View details Hong Kong Services
    Ransomware hagemann-h.de id19971 View details Germany Other
    Ransomware metten-maas.de id19970 View details Germany Other
    Ransomware scheuerle-stuttgart.de id19969 View details Germany Transportation / Travel / Logistics
    Ransomware gewandhaus.bayern id19968 View details Germany Communication / Marketing
    Ransomware morricetransportation.com id19967 View details United States Transportation / Travel / Logistics
    Ransomware eu-rec.de id19779 View details Germany Other
    Ransomware schapmann id19778 View details Germany Other
    Ransomware dosjm.com id19777 View details Hong Kong Other
    Ransomware biglevel.net id19776 View details United States Other
    Ransomware bloomfamilyeyesurgeons.com id19775 View details United States Communication / Marketing
    Ransomware kolpa.com.pe id19774 View details Peru Communication / Marketing
    Ransomware dreng.com id19773 View details United States Other
    Ransomware mooregiles.com id19772 View details United States Healthcare / Pharma
    Ransomware itec-gmbh.com id19218 View details Germany Construction / Real Estate
    Ransomware heinrich-steinhardt.de id19217 View details Germany Other
    Ransomware hurst-schroeder.de id19216 View details Germany Other
    Ransomware helixtools.co.uk id19215 View details United Kingdom Communication / Marketing
    Ransomware heilbronn.de id19214 View details Germany Other
    Ransomware getriebetech.de id19213 View details Germany IT
    Ransomware kirkel.de id19212 View details Germany Other
    Ransomware extremefire.com.au id19211 View details Australia Communication / Marketing
    Ransomware foerster-schwanau.de id19210 View details Germany Other
    Ransomware eichele-bau.de id19209 View details Germany Other
    Ransomware frapack.de id19208 View details Germany Manufacturing / Engineering
    Ransomware niemann.de id19205 View details Germany Communication / Marketing
    Ransomware creativeunited.org.uk id18835 View details United Kingdom Communication / Marketing
    Ransomware brightonaustralia.com.au id18834 View details Australia Other
    Ransomware tieraerzte-warburg.de id18833 View details Germany Other
    Ransomware system-toolsgmbh.de id18832 View details Germany Other
    Ransomware vinylvisions.com id18831 View details United States Communication / Marketing
    Ransomware estilointeriors.co.uk id18830 View details United Kingdom Healthcare / Pharma
    Ransomware swr.school id18829 View details Germany Education
    Ransomware albrecht-partner-steuerberatung.de id18828 View details Germany Communication / Marketing
    Ransomware alpsteel.com id18827 View details Türkiye Manufacturing / Engineering
    Ransomware blunk-gmbh.de id18826 View details Germany Agriculture / Food
    Ransomware cjs-buerodienstleistungen.de id18825 View details Germany Other
    Ransomware beaudry.ca id18824 View details Canada Other
    Ransomware bohrerhof.de id18823 View details Germany Agriculture / Food
    Ransomware metalogicinspection.com id18822 View details United States Manufacturing / Engineering
    Ransomware comfort.de id18821 View details Germany Other
    Ransomware vcvitanzasons.com id18820 View details United States Other
    Ransomware tramann.de id18819 View details Germany Other
    Ransomware schuhbode.de id18818 View details Germany Communication / Marketing
    Ransomware norson.com id18817 View details Mexico Construction / Real Estate
    Ransomware fd-friedrich.com id18816 View details Germany Other
    Ransomware westwarwickwelding.com id18815 View details United States Other
    Ransomware prestigeer.com id18814 View details United States Communication / Marketing
    Ransomware ecconstructors.com id18813 View details United States Communication / Marketing
    Ransomware wrm.org id18812 View details United States Other
    Ransomware retycol.com id18811 View details Colombia Other
    Ransomware marcom-inc.ca id18810 View details Canada Communication / Marketing
    Ransomware adolphelawgroup.com id18809 View details United States Finance / Legal / Insurance
    Ransomware wagner-transporte.com id18808 View details Germany Transportation / Travel / Logistics
    Ransomware children-ne.org.uk id18807 View details United Kingdom Other
    Ransomware mayaassurance.com id18806 View details United States Communication / Marketing
    Ransomware saiedu.fi id18709 View details Finland Education
    Ransomware compassionhealthcare.org id18600 View details Healthcare / Pharma
    Ransomware terrell.k12.ga.us id18472 View details United States Other
    Ransomware argusdatainsights.de id18423 View details Germany Communication / Marketing
    Ransomware tradingacademy.com id18344 View details United States Education
    Ransomware ultimateclasslimo.com id18343 View details United States Communication / Marketing
    Ransomware havenresorts.com id18342 View details Mexico Hospitality / Food & Beverage / Tourism
    Ransomware lgipr.com id18341 View details United States Communication / Marketing
    Ransomware jockeysalud.com.pe id18340 View details Peru Healthcare / Pharma
    Ransomware motomecanica.com id18339 View details Spain Communication / Marketing
    Ransomware cali.losolivos.co id18338 View details Colombia Communication / Marketing
    Ransomware willms-fleisch.de id18188 View details Germany Communication / Marketing
    Ransomware plasseramerican.com id18101 View details United States Manufacturing / Engineering
    Ransomware conduent.com id17679 View details United States Services
    Ransomware ziese.net id17648 View details Germany Communication / Marketing
    Ransomware rwrhine.com id17647 View details United States Communication / Marketing
    Ransomware foyernotredamedepaix.be id17646 View details Belgium Healthcare / Pharma
    Ransomware fastrans.com id17645 View details United States Transportation / Travel / Logistics
    Ransomware stjerome.org id17496 View details United States Education
    Ransomware harcoboe.net id17256 View details Denmark Communication / Marketing
    Ransomware lowernazareth.com id17255 View details United States Communication / Marketing
    Ransomware www.iecsolutions.com id17240 View details United States Services