companionsandhomemakers.com Listed by safepay Ransomware Group

On June 14, 2025, Companions & Homemakers, a Connecticut nonprofit home-care provider, appeared on the leak site of the safepay ransomware group. The organization, which has offered in-home support services for more than 30 years, is claimed to have had internal files exfiltrated during a ransomware attack. Public reporting indicates the number of individuals whose data was exposed remains unknown.

Reported Details of the Breach

Available reporting describes the incident as a ransomware attack in which safepay operators gained access to the nonprofit’s systems and removed internal files before encrypting data and demanding payment. The group published a post on its dark-web leak site on June 14, 2025, listing companionsandhomemakers.com as a victim. No specific count of affected clients, employees, or family members has been released. The types of information contained in the exfiltrated files have not been publicly detailed beyond the general description of “internal files.”

Why This Matters for You and Your Family

When a home-care provider is breached, the people most at risk are often the very families who relied on it for daily support. Client records, caregiver schedules, contact information, and payment details can easily contain the names, addresses, phone numbers, dates of birth, and Social Security numbers of seniors, disabled adults, and their relatives. If your family used Companions & Homemakers or any similar local service, your personal information may now sit in an attacker’s archive. Once stolen data leaves a company’s control, it can surface months or years later in identity theft, insurance fraud, or targeted scams against older relatives who are less likely to spot suspicious activity.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one company’s files. A single exposed email or phone number can be linked to usernames on social media, gaming platforms, and shopping accounts. Attackers chain these connections together to build a complete picture of your household. Public reporting shows that credential leaks of this kind frequently cascade into account takeovers, especially for gaming accounts belonging to children or teenagers who reuse passwords. When an attacker can tie a child’s gaming handle back to a parent’s home address and phone number listed in a care-provider file, the risk of harassment, swatting, or doxxing rises sharply.

Safepay Group’s Known Track Record

Public reporting attributes the safepay ransomware operation to a group that emerged in late 2024. The actors typically follow a double-extortion playbook: they first deploy ransomware to encrypt victim systems, then exfiltrate sensitive files before offering to negotiate a payment to prevent publication. Notable prior victims have included healthcare and nonprofit organizations, sectors the group appears to target for the volume of personal data they hold. Their leak site is used both to pressure victims and to sell or release data when demands are not met.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what chains back to the Companions & Homemakers breach.
• Rotate any password you used on companionsandhomemakers.com or related care-provider portals anywhere it has been reused, and switch to 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the weakest link in doxxing chains after credential leaks like this one.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles while you focus on securing accounts and talking with affected family members.

The most effective defense is early visibility and rapid action before criminals can connect the dots. Start your DoxxScan trial today and let its continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation specialists work for your entire family, including gaming accounts that could otherwise turn one breach into a prolonged harassment campaign. Taking these steps now limits what attackers can do with data already circulating on the safepay leak site.