new-point.it Listed by safepay Ransomware Group

On August 03, 2026, the ransomware group Safepay listed Italian company new-point.it on its leak site, claiming to have exfiltrated internal files during a ransomware attack. The company, headquartered in Signa, Florence, and founded in 2006, has not publicly confirmed the incident as of this writing. This means the listing remains an unconfirmed claim by the threat actor.

Details from the Leak-Site Listing

The Safepay leak site states that it obtained internal files from new-point.it following a ransomware deployment. The listing does not specify the volume of data taken, the exact date of the intrusion, or the types of files exfiltrated beyond describing them as internal company documents. No sample data has been publicly released at the time of analysis, and the group has not published any proof files on the onion site. The notification on the leak site follows the group’s standard format for victims who have not yet met its extortion demands.

Why This Matters for You and Your Family

When a supplier or service provider like new-point.it is targeted, customer and partner records are often among the internal files taken. Even though the exact number of affected individuals remains unknown, any breach of a company’s internal documents can expose names, addresses, contact details, contract information, or payment records belonging to ordinary customers and employees. For you and your family, this creates a realistic risk that personal data could surface in extortion campaigns or be sold on underground markets. The fact that the company has not issued its own statement means there is currently no official timeline for notification or credit monitoring offers.

Doxxing and Identity-Chain Risks

Internal files frequently contain more than just names and emails. They can include home addresses, phone numbers, dates of birth, and references to related accounts. These details allow attackers to build identity chains that link your professional or commercial relationship with the company to your personal digital footprint. A leaked home address, for example, immediately exposes everyone living at that location. Credential material or account references found in business files can also cascade into gaming accounts belonging to you or your children, turning a corporate ransomware incident into long-term personal doxxing and account takeover risks.

Safepay Ransomware Group Track Record

Public reporting attributes Safepay with emerging in late 2025 as a double-extortion operation. The group typically gains initial access through phishing or exploited remote desktop services, exfiltrates data before deploying ransomware, and then pressures victims by threatening to publish stolen files on its leak site. Notable prior victims include small-to-medium European businesses across manufacturing, logistics, and professional services sectors. Like many contemporary ransomware actors, Safepay combines encryption with data-theft extortion, setting payment deadlines that often range from a few days to several weeks. The group’s leak site is hosted on the dark web and updated irregularly when victims fail to pay.

What to Do

• Run a DoxxScan to map every link between your email addresses, phone numbers, usernames, and real-world identity, then use the no-subscription cleanup of Warden to address immediate exposures.
• Enable continuous DoxxScan monitoring across 15.4 billion breach records and more than 100 platforms so the next time your information appears it is caught within hours rather than months.
• Rotate any passwords you have reused with new-point.it or its related services and switch to 2FA using an authenticator app instead of SMS.
• Let remediation specialists handle takedown requests for any personal records that surface on data broker sites or underground forums.
• Note that a leaked home address from this incident puts every member of your household at risk, and only your own removal actions can begin to take that address out of circulation.

The most important forward-looking reality is that corporate ransomware claims like this one continue to surface without warning, often exposing ordinary families in the process. Staying ahead requires proactive visibility rather than reactive damage control. DoxxScan by GalaxyWarden delivers continuous monitoring across 15.4B+ breach records and 100+ platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists who know exactly how these chains operate. For many people, this combination has become an essential layer of personal defense.