Ransomware Group intelligence

Safepay

Active

Track Safepay with 570 published victims and 5 known leak locations in a single intelligence view.

Victims 570 Known published victims in this dataset
First discovered 2024-11-19 Earliest victim discovery date
Last discovered 2026-07-27 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 212 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Safepay is tracked by Breach House as a ransomware group with 570 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion
    Leak location 2 Onion service Unknown cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion
    Leak location 3 Onion service Unknown nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion
    Leak location 4 Onion service Unknown j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion
    Leak location 5 Onion service Unknown safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (570)

    Search, filter and paginate the victim timeline for Safepay. Showing 501–570 of 570.

    Type Target Discovered Country Business Category Intel Link
    Ransomware brewsterfiredepartment.org id17153 View details United States Public Sector
    Ransomware derrimon.com id17152 View details Jamaica Communication / Marketing
    Ransomware globexusa.com id17151 View details United States Services
    Ransomware muscogee.k12.ga.us id16960 View details United States Education
    Ransomware bigotti.ro id16862 View details Romania Communication / Marketing
    Ransomware mcpathology.com id16861 View details Australia Healthcare / Pharma
    Ransomware nutripack.eu id16860 View details France Agriculture / Food
    Ransomware paradiseschools.org id16859 View details United States Education
    Ransomware welcomewagon.com id16858 View details United States Services
    Ransomware cellsciencesystems.com id16857 View details United States Healthcare / Pharma
    Ransomware BBBIND.COM id16771 View details United States Communication / Marketing
    Ransomware gaylord.org id16767 View details Other
    Ransomware semesco.com id16752 View details Cyprus Retail / E-commerce
    Ransomware brunetti.com id16751 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware solge.es id16750 View details Spain IT
    Ransomware gonzalesusd.net id16708 View details United States Education
    Ransomware platinumcollision.com id16692 View details United States Communication / Marketing
    Ransomware safecoastseafoods.com id16677 View details United States Agriculture / Food
    Ransomware greyform.sg id16676 View details Singapore Construction / Real Estate
    Ransomware proexequialesresurgir.com id16675 View details Colombia Communication / Marketing
    Ransomware bellandgraham.co.nz id16674 View details New Zealand Hospitality / Food & Beverage / Tourism
    Ransomware termopuerto.com id16673 View details El Salvador Communication / Marketing
    Ransomware equipo-postal.com id16672 View details Mexico Services
    Ransomware ddelta.com.mx id16671 View details Mexico Communication / Marketing
    Ransomware royalinsignia.com id16446 View details Singapore Other
    Ransomware starkvillesd.com id16445 View details United States Other
    Ransomware spiro.k12.ok.us id16444 View details United States Other
    Ransomware byronunionschooldistrict.us id16443 View details United States Education
    Ransomware multicoasia.com id16442 View details Singapore Other
    Ransomware dprinvestments.com id16441 View details Anguilla Finance / Legal / Insurance
    Ransomware UPR.SG id16440 View details Singapore Communication / Marketing
    Ransomware itca.edu.sv id16389 View details El Salvador Other
    Ransomware etplaw.com id16388 View details United Arab Emirates Finance / Legal / Insurance
    Ransomware muswellbrook.nsw.gov.au id16034 View details Australia Other
    Ransomware cityofmarlow.com id15999 View details United Kingdom Public Sector
    Ransomware nbkenney.com id15998 View details United States Other
    Ransomware casaimports.com id15885 View details United States Other
    Ransomware ktpartners.ca id15884 View details Canada Other
    Ransomware elwood.k12.in.us id15704 View details United States Other
    Ransomware scottelec.com id15703 View details United States Other
    Ransomware helixbermuda.bm id15702 View details Bermuda Other
    Ransomware australianhearthealth.org.au id15701 View details Australia Healthcare / Pharma
    Ransomware midlandtool.com id15700 View details United States Other
    Ransomware mdmcusa.com id15644 View details United States Other
    Ransomware titlenine.com id15605 View details United States Other
    Ransomware www.microlise.com id15547 View details United Kingdom Other
    Ransomware snowbrand.com.au id15521 View details Australia Other
    Ransomware piburners.com id15520 View details United States Other
    Ransomware tritonsourcing.co.nz id15519 View details New Zealand Other
    Ransomware onnicar.it id15518 View details Italy Other
    Ransomware kingswoodpark.ca id15517 View details Canada Other
    Ransomware incocommercial.com id15516 View details United States Services
    Ransomware euromedix.com id15515 View details Belgium Other
    Ransomware BusinessTraining.be id15514 View details Belgium Education
    Ransomware ccseniorservices id15513 View details United States Services
    Ransomware ib-spieth.de id15512 View details Germany Other
    Ransomware Safex.us id15511 View details United States Other
    Ransomware millerservicecompany.com id15510 View details United States Services
    Ransomware mcauslan.com id15509 View details Canada Other
    Ransomware stats.gov.bb id15508 View details Barbados Other
    Ransomware smartdimensions id15507 View details United States Other
    Ransomware westwood id15506 View details United States Other
    Ransomware threadfxinc/bluedogmerch id15505 View details United States Services
    Ransomware Pronatec id15504 View details Switzerland Communication / Marketing
    Ransomware Gilazo id15503 View details Israel Other
    Ransomware OMINT id15502 View details Argentina Other
    Ransomware NKCE Japan id15501 View details Japan Manufacturing / Engineering
    Ransomware Richmond Hill Primary Academy id15500 View details United Kingdom Education
    Ransomware Active Cosmetic id15499 View details Argentina Other
    Ransomware O'mara id15498 View details Ireland Other