Ransomware Group intelligence
Safepay
ActiveTrack Safepay with 570 published victims and 5 known leak locations in a single intelligence view.
Overview
Safepay is tracked by Breach House as a ransomware group with 570 published victims.
United States is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion |
| Leak location 2 | Onion service | Unknown | cqkrkmmivhakl3fwgxscurduu3znmroablt7jskxszkctixyseij5gad.onion |
| Leak location 3 | Onion service | Unknown | nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion |
| Leak location 4 | Onion service | Unknown | j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion |
| Leak location 5 | Onion service | Unknown | safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (570)
Search, filter and paginate the victim timeline for Safepay. Showing 501–570 of 570.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | brewsterfiredepartment.org id17153 View details | United States | Public Sector | ||
|
[AI generated] "Brewster Fire Department" appears to be a fire and emergency service provider based in Brewster, likely in the United States. As a fire department, they are likely responsible for providing rapid, professional response to fires, medical emergencies, and other incidents that threaten public safety. They may also offer public educational programs focused on fire safety, emergency preparedness, and related topics. Note that more specific information may vary by location. |
|||||
| Ransomware | derrimon.com id17152 View details | Jamaica | Communication / Marketing | ||
|
[AI generated] Derrimon Trading Company Limited is a Jamaican-based firm engaged in the distribution and trading of a wide array of product categories from food items to personal care. The company has also ventured into retail with the acquisition of Sampars Cash and Carry, and operates numerous supermarkets throughout Jamaica. Derrimon aims to consistently provide its customers with high quality products while prioritizing sustainable growth. |
|||||
| Ransomware | globexusa.com id17151 View details | United States | Services | ||
|
[AI generated] GlobexUSA is a company that specializes in cross-border e-commerce solutions, helping businesses expand their reach globally. It offers services such as international logistics, web development, and online marketing. They also provide services to help businesses deal with aspects like taxation, regulatory compliance, customs and international payments. It is a versatile solution for businesses aiming to extend their operations internationally. |
|||||
| Ransomware | muscogee.k12.ga.us id16960 View details | United States | Education | ||
|
[AI generated] Muscogee.k12.ga.us is the official web portal for the Muscogee County School District, located in Georgia, USA. They aim to inspire and equip all students to achieve unlimited potential. The website provides resources including information about schools in the district, educational programs, staff contacts, calendar events, and various student and parent services. |
|||||
| Ransomware | bigotti.ro id16862 View details | Romania | Communication / Marketing | ||
|
[AI generated] Bigotti.ro is a Romania-based fashion company specializing in men's clothing and accessories. Known for its high-quality Italian design, the brand offers a wide selection of items such as suits, shirts, shoes, and ties. They focus on providing stylish, yet comfortable apparel that suits both formal and casual occasions. Customer service and satisfaction are at the core of their values. |
|||||
| Ransomware | mcpathology.com id16861 View details | Australia | Healthcare / Pharma | ||
|
[AI generated] McPathology.com is essentially a Brisbane-based medical diagnostic service and laboratory that provides a wide range of pathology testing services. It is fully accredited by the Royal College of Pathologists of Australia. Professional pathologists, doctors, and health professionals rely on it to deliver accurate results with the aim of diagnosing, treating, and monitoring diseases and health conditions more effectively. |
|||||
| Ransomware | nutripack.eu id16860 View details | France | Agriculture / Food | ||
|
[AI generated] Nutripack.eu is a prominent international company based in Europe that specializes in the manufacturing and sales of sustainable food packaging. The company offers innovative, eco-friendly solutions for food packaging, ranging from recyclable trays to bio-degradable options. Established with the goal of reducing plastic wastage, Nutripack's strategic commitment revolves around environmental responsibility and creativity. They cater to various sectors including catering, agri-food industries, and healthcare. |
|||||
| Ransomware | paradiseschools.org id16859 View details | United States | Education | ||
|
[AI generated] Paradise Schools is a network of K-12 charter schools located in Surprise, Arizona. The organization, established in 1997, comprises three schools - Paradise Honors High School, Paradise Honors Middle School, and Paradise Education Center. It offers a comprehensive curriculum aligned with state and national standards. The student-centric institution strives to cultivate creativity, critical thinking, leadership, and character development in a safe and inclusive environment. |
|||||
| Ransomware | welcomewagon.com id16858 View details | United States | Services | ||
|
[AI generated] Welcome Wagon is a US-based company focused on creating connections between new homeowners, movers and local businesses. They specialize in welcoming new residents to their community, introducing them to products and services of local businesses through direct mail marketing, digital marketing services, and gift books. They aim to stimulate local economic growth by fostering these new relationships. |
|||||
| Ransomware | cellsciencesystems.com id16857 View details | United States | Healthcare / Pharma | ||
|
[AI generated] Cell Science Systems is a specialty clinical laboratory that develops and performs laboratory testing in immunology and cell biology to assist healthcare providers in the diagnosis, treatment, and monitoring of complex disorders. The company is notable for pioneering the Alcat Test for food and chemical sensitivities. The tests support the personalized treatment plans for conditions like digestion issues, migraines, obesity, chronic fatigue, aching joints, skin disorders, etc. |
|||||
| Ransomware | BBBIND.COM id16771 View details | United States | Communication / Marketing | ||
|
[AI generated] BBBIND.COM is a leading American company specialized in automotive aftermarket parts. It sells premium parts, particularly offering high-quality rotating electrical products. The company’s product portfolio includes alternators, starters, brake calipers, power steering products, etc. They also provide their customers with technical diagnostic support and information to ensure the correct product usage. |
|||||
| Ransomware | gaylord.org id16767 View details | Other | |||
|
No additional victim description available. |
|||||
| Ransomware | semesco.com id16752 View details | Cyprus | Retail / E-commerce | ||
|
[AI generated] Semesco.com is an e-commerce platform that allows users to buy and sell a variety of products across different categories. These include electronics, clothing, beauty products, household items, and more. It also facilitates secure online transactions and provides delivery services to customers. Moreover, Semesco supports local brands and businesses by helping them reach a wider customer base. They focus on providing an enhanced shopping experience with a user-friendly website and customer service. |
|||||
| Ransomware | brunetti.com id16751 View details | Australia | Hospitality / Food & Beverage / Tourism | ||
|
[AI generated] Brunetti is a renowned Italian cafe established in Melbourne, Australia in 1985. Known for its European ambiance and authentic Italian food, Brunetti offers a wide range of options including gourmet pizza, pasta, gelato and one of Melbourne's most extensive ranges of Italian pastries, cakes and desserts. They also provide catering and online takeaway ordering services. |
|||||
| Ransomware | solge.es id16750 View details | Spain | IT | ||
|
[AI generated] Solge.es is a Spanish-based Information Technology company primarily focusing on the development of mobile applications, web design, and digital marketing. They aim to increase the effectiveness of enterprises by offering comprehensive IT solutions and digital marketing strategies. Besides these services, they provide training and consultancy in the field of web design and digital marketing. |
|||||
| Ransomware | gonzalesusd.net id16708 View details | United States | Education | ||
|
[AI generated] I'm sorry for the confusion but gonzalesusd.net is not a company. It's actually the domain for the Gonzales Unified School District in Gonzales, California, primarily responsible for all public education in the city. It incorporates various levels of education including elementary, middle, and high school. It works to create enriching, engaging environments for students, teachers and staff. |
|||||
| Ransomware | platinumcollision.com id16692 View details | United States | Communication / Marketing | ||
|
[AI generated] Platinum Collision is a reputed automotive repair company specializing in car body repair and paint services. They provide high-quality restorative solutions to vehicle owners, promising excellent craftsmanship, advanced equipment, and certified technicians. They ensure full collision repairs in line with vehicle manufacturer standards. Customer satisfaction, consistency in deliverance and commitment to quality makes Platinum Collision a preferred choice for many. |
|||||
| Ransomware | safecoastseafoods.com id16677 View details | United States | Agriculture / Food | ||
|
[AI generated] Safecoast Seafoods is a premium seafood sourcing and distribution company. They are focused on delivering the highest quality fresh and frozen seafood to various markets. They partner with sustainable fisheries worldwide, ensuring they offer a wide variety of species. Their services include wholesale distribution, home delivery and even private labeling, meeting the needs of restaurants, markets, and individual consumers alike. |
|||||
| Ransomware | greyform.sg id16676 View details | Singapore | Construction / Real Estate | ||
|
[AI generated] Greyform Pte Ltd is a Singapore-based construction company specialising in prefab construction methods. With a focus on sustainability and high-efficiency construction, Greyform uses innovative techniques to meet the demands of today's construction industry. Their services include the design, production, logistics and installation of prefabricated components for residential, commercial and civil engineering projects. |
|||||
| Ransomware | proexequialesresurgir.com id16675 View details | Colombia | Communication / Marketing | ||
|
Inicio | Proexequiales Resurgi |
|||||
| Ransomware | bellandgraham.co.nz id16674 View details | New Zealand | Hospitality / Food & Beverage / Tourism | ||
|
Back in 1954, a man named Ray Kroc discovered a small burger restaurant in California, and wrote the first page of our history. From humble beginnings as a small restaurant, we're proud to have become one of the world's leading food service brands with more |
|||||
| Ransomware | termopuerto.com id16673 View details | El Salvador | Communication / Marketing | ||
|
[AI generated] Termopuerto.com is a logistics company specializing in the integral control of perishable goods. With its operations based in Guatemala, the company ensures efficient and safe handling of products during transportation and storage. It provides advanced temperature-controlled solutions ideal for preserving the quality of goods like fruits, vegetables, and seafood among others. Its services include pre-cooling, packing, labeling, inventory management and customs services. |
|||||
| Ransomware | equipo-postal.com id16672 View details | Mexico | Services | ||
|
[AI generated] Equipo Postal is a Mexican company that specializes in logistics and delivery services. They offer comprehensive solutions for mail and parcel deliveries, e-commerce distribution, and personalized logistics strategies. With a focus on innovation, they utilise advanced technology to provide efficient and reliable services. Dedicated to customer satisfaction, Equipo Postal Implements custom solutions to meet individual business needs. All while remaining eco-friendly and sustainably focused. |
|||||
| Ransomware | ddelta.com.mx id16671 View details | Mexico | Communication / Marketing | ||
|
[AI generated] Ddelta.com.mx is a Mexico-based company that specializes in offering software solutions and automation services. Their products and services span across various industries including energy, mining, chemical, food and beverage, and more. They offer solutions that optimize processes, improve production efficiency, reduce operating costs and increase profitability. These include programming, instrumentation, electrical design, etc. The company prides itself on its customer-centric approach. |
|||||
| Ransomware | royalinsignia.com id16446 View details | Singapore | Other | — | |
|
Revenue $6.5 Million |
|||||
| Ransomware | starkvillesd.com id16445 View details | United States | Other | — | |
|
Revenue $9.1 Million |
|||||
| Ransomware | spiro.k12.ok.us id16444 View details | United States | Other | — | |
|
Revenue $5 Million |
|||||
| Ransomware | byronunionschooldistrict.us id16443 View details | United States | Education | — | |
|
Revenue $19.3 Million |
|||||
| Ransomware | multicoasia.com id16442 View details | Singapore | Other | — | |
|
Revenue $11.6 Million |
|||||
| Ransomware | dprinvestments.com id16441 View details | Anguilla | Finance / Legal / Insurance | — | |
|
Revenue $13 Million |
|||||
| Ransomware | UPR.SG id16440 View details | Singapore | Communication / Marketing | — | |
|
Revenue $8.9 Million |
|||||
| Ransomware | itca.edu.sv id16389 View details | El Salvador | Other | — | |
|
Revenue $56.5 Million |
|||||
| Ransomware | etplaw.com id16388 View details | United Arab Emirates | Finance / Legal / Insurance | — | |
|
Revenue $5 Million |
|||||
| Ransomware | muswellbrook.nsw.gov.au id16034 View details | Australia | Other | — | |
|
Soon |
|||||
| Ransomware | cityofmarlow.com id15999 View details | United Kingdom | Public Sector | — | |
|
Revenue $5 Million |
|||||
| Ransomware | nbkenney.com id15998 View details | United States | Other | — | |
|
Revenue $5 Million |
|||||
| Ransomware | casaimports.com id15885 View details | United States | Other | — | |
|
Revenue $5 Million |
|||||
| Ransomware | ktpartners.ca id15884 View details | Canada | Other | — | |
|
Revenue $5 Million |
|||||
| Ransomware | elwood.k12.in.us id15704 View details | United States | Other | — | |
|
Revenue $5 Million |
|||||
| Ransomware | scottelec.com id15703 View details | United States | Other | — | |
|
Revenue $19.6 Million |
|||||
| Ransomware | helixbermuda.bm id15702 View details | Bermuda | Other | — | |
|
Revenue $5 Million |
|||||
| Ransomware | australianhearthealth.org.au id15701 View details | Australia | Healthcare / Pharma | — | |
|
Revenue $7 Million |
|||||
| Ransomware | midlandtool.com id15700 View details | United States | Other | — | |
|
Revenue $126 Million |
|||||
| Ransomware | mdmcusa.com id15644 View details | United States | Other | — | |
|
Revenue $5 Million |
|||||
| Ransomware | titlenine.com id15605 View details | United States | Other | — | |
|
Revenue $60.8 Million |
|||||
| Ransomware | www.microlise.com id15547 View details | United Kingdom | Other | — | |
|
Revenue $91.4 Million |
|||||
| Ransomware | snowbrand.com.au id15521 View details | Australia | Other | — | |
|
Revenue $9.5 Million |
|||||
| Ransomware | piburners.com id15520 View details | United States | Other | — | |
|
ZIP-156GB - Revenue $5 Million |
|||||
| Ransomware | tritonsourcing.co.nz id15519 View details | New Zealand | Other | — | |
|
ZIP-10GB - Revenue $5 Million |
|||||
| Ransomware | onnicar.it id15518 View details | Italy | Other | — | |
|
ZIP-127GB - Revenue $23.2 Million |
|||||
| Ransomware | kingswoodpark.ca id15517 View details | Canada | Other | — | |
|
ZIP-55GB |
|||||
| Ransomware | incocommercial.com id15516 View details | United States | Services | — | |
|
ZIP-210GB - Revenue $5 Million |
|||||
| Ransomware | euromedix.com id15515 View details | Belgium | Other | — | |
|
ZIP-105GB - Revenue $6.2 Million |
|||||
| Ransomware | BusinessTraining.be id15514 View details | Belgium | Education | — | |
|
ZIP-80GB - Revenue $16.3 Million |
|||||
| Ransomware | ccseniorservices id15513 View details | United States | Services | — | |
|
ZIP-50GB |
|||||
| Ransomware | ib-spieth.de id15512 View details | Germany | Other | — | |
|
ZIP-415B - Revenue $5 Million |
|||||
| Ransomware | Safex.us id15511 View details | United States | Other | — | |
|
ZIP-70GB - Revenue $5,4 Million |
|||||
| Ransomware | millerservicecompany.com id15510 View details | United States | Services | — | |
|
ZIP-70GB |
|||||
| Ransomware | mcauslan.com id15509 View details | Canada | Other | — | |
|
ZIP-50GB - Revenue $16.1 Million |
|||||
| Ransomware | stats.gov.bb id15508 View details | Barbados | Other | — | |
|
ZIP-330GB - Revenue $14.5 Million |
|||||
| Ransomware | smartdimensions id15507 View details | United States | Other | — | |
|
ZIP-18GB - Revenue $<5 Million |
|||||
| Ransomware | westwood id15506 View details | United States | Other | — | |
|
ZIP-50GB - Revenue $8.1 Million |
|||||
| Ransomware | threadfxinc/bluedogmerch id15505 View details | United States | Services | — | |
|
ZIP-70GB - Revenue $10.7 Million |
|||||
| Ransomware | Pronatec id15504 View details | Switzerland | Communication / Marketing | — | |
|
Revenue $5 Million |
|||||
| Ransomware | Gilazo id15503 View details | Israel | Other | — | |
|
Revenue $5 Million |
|||||
| Ransomware | OMINT id15502 View details | Argentina | Other | — | |
|
Revenue $540.7 Million |
|||||
| Ransomware | NKCE Japan id15501 View details | Japan | Manufacturing / Engineering | — | |
|
[AI generated] NKCE Japan is a company known for its expertise in engineering and manufacturing, specializing in precision components and advanced technological solutions. It serves various industries, providing high-quality products and innovative services. NKCE Japan is committed to excellence and customer satisfaction, leveraging cutting-edge technology and skilled craftsmanship to meet diverse client needs. |
|||||
| Ransomware | Richmond Hill Primary Academy id15500 View details | United Kingdom | Education | — | |
|
[AI generated] Richmond Hill Primary Academy is an educational institution focused on providing a nurturing and dynamic learning environment for children. It emphasizes academic excellence, personal growth, and community engagement. The academy offers a broad curriculum designed to foster creativity, critical thinking, and a love for learning, supported by a dedicated team of educators and staff. |
|||||
| Ransomware | Active Cosmetic id15499 View details | Argentina | Other | — | |
|
Revenue $26.7 Million |
|||||
| Ransomware | O'mara id15498 View details | Ireland | Other | — | |
|
Revenue $5.7 Million |
|||||