safepay Unknown
First seen:
19/01/2026 19:35
Last Attack:
27/06/2026
25
Total Victims
0
Victims (30d)
Details
SafePay emerged in September 2024 as a rapidly growing ransomware operation that explicitly disavows the RaaS model and manages all operations internally, claiming over 300 victims worldwide by mid-2025 with a high-profile early attack against UK telematics firm Microlise stealing 1.2 TB of data.
Leak Site
Onion URL:
http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion
Victims by Country
🇺🇸
United States
7
🇩🇪
Germany
5
🇨🇦
Canada
4
🇮🇱
Israel
1
🇪🇸
Spain
1
🇮🇹
Italy
1
🇦🇷
Argentina
1
🇬🇧
United Kingdom
1
Ransomware Victims 10
| Victim | Country | Sector | Discovered |
|---|---|---|---|
| hellmold-plank.de | 🇩🇪 DE | Manufacturing |
27/06/2026 18:28 27/06/2026 |
| ehg.bayern | 🇩🇪 DE | Not Found |
22/06/2026 21:34 22/06/2026 |
| academyhealth.org | 🇺🇸 US | Healthcare |
06/04/2026 21:16 06/04/2026 |
| brookercg.com | 🇺🇸 US | Technology |
17/03/2026 20:22 17/03/2026 |
| tiefenbachergroup.com | 🇩🇪 DE | Healthcare |
17/03/2026 20:21 17/03/2026 |
| briwaycarriers.com | 🇨🇦 CA | Transportation/Logistics |
17/03/2026 20:21 17/03/2026 |
| mattandsteve.com | 🇨🇦 CA | Not Found |
17/03/2026 20:20 17/03/2026 |
| thenavigatorcompany.com | 🇵🇹 PT | Manufacturing |
17/03/2026 20:19 17/03/2026 |
| smileteam.com.au | 🇦🇺 AU | Healthcare |
06/03/2026 19:52 06/03/2026 |
| ripobec.com | 🇨🇦 CA | Not Found |
03/03/2026 21:51 03/03/2026 |
Metadata
Slug:
safepay
Created: 14/01/2026 08:19
Updated: 28/06/2026 16:02