Skip to content
← All breaches
Threat actor tracker 590 incidents tracked

SafePay — every breach we're tracking

Running log of incidents attributed to or claimed by SafePay in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked590
Latest activitySeptember 30, 2026
TypeRansomware / extortion

Groups like SafePay steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 590 incidents we've attributed to SafePay.

high September 30, 2026

wolfusofsky.de Listed by SafePay Ransomware Group

The group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate, Saarland…

high September 30, 2026

assist2enjoy.be Listed by SafePay Ransomware Group

The company was established in 2015 and operates primarily in the wholesale and retail market for electrical household appliances. Its ……

high September 30, 2026

econ-tec.com Listed by SafePay Ransomware Group

The company focuses on designing technical systems for industrial customers, combining engineering expertise with process optimization, auto…

high September 28, 2026

auromex.com Listed by SafePay Ransomware Group

The company is headquartered in Samut Prakan Province and has more than five decades of experience in the surface-finishing industry. ……

high September 28, 2026

Holiday Inn Vilnius Listed by SafePay Ransomware Group

The property operates under the international Holiday Inn brand of IHG Hotels & Resorts. The hotel provides 134 guest rooms, ……

high September 28, 2026

sumperk.cz Listed by SafePay Ransomware Group

The official website, sumperk.cz, serves as the city's principal digital information and service portal for residents, businesses, visitors …

high September 28, 2026

cromados.com Listed by SafePay Ransomware Group

The company's registered business activities include thermal treatment of metals, organic and electrolytic coatings, and the manufacture and…

high September 28, 2026

manno.ch Listed by SafePay Ransomware Group

The official website, manno.ch, provides residents, businesses and visitors with information about municipal administration, public services…

high September 28, 2026

eagroep.com Listed by SafePay Ransomware Group

The group is headquartered in Deventer, Overijssel, and brings together several specialized business units operating in areas such as career…

high September 28, 2026

sumperk.cz Listed by SafePay Ransomware Group

The official website, sumperk.cz, serves as the city's principal digital information and service portal for residents, businesses, visitors …

high September 28, 2026

fedelmundo.com.ph Listed by SafePay Ransomware Group

The institution traces its origins to 1957, when Filipino pediatrician and scientist Dr. Fe del Mundo established Children's Memorial Hospit…

high September 28, 2026

bio-strath.com Listed by SafePay Ransomware Group

The company was established in 1961 and operates the Bio-Strath brand, which is particularly associated with liquid and tablet nutritional ……

high September 28, 2026

lfgholding.com Listed by SafePay Ransomware Group

The company operates as an independent, partner-owned wealth-management group and manages a portfolio of specialized financial-services busi…

high September 15, 2026

marlinhvac.com Listed by SafePay Ransomware Group

Founded in 1989 by Michael and Richard Pellino, the company has developed more than three decades of experience in mechanical ……

high September 15, 2026

triniticaring.org Listed by SafePay Ransomware Group

The organization is jointly owned by Guardian Angels Senior Services of Elk River and Cassia, an Augustana/Elim affiliation. Its headquarter…

high September 15, 2026

ryomo.co.jp Listed by SafePay Ransomware Group

Established in January 1970 as a regional computer-services center, the company has developed into a publicly listed systems integrator prov…

high September 15, 2026

ryomo.co.jp Listed by SafePay Ransomware Group

Established in January 1970 as a regional computer-services center, the company has developed into a publicly listed systems integrator prov…

high September 15, 2026

ara-lyss.ch Listed by SafePay Ransomware Group

Its headquarters and main wastewater-treatment facility are located at Industriering 28 in Lyss. The organization also operates the ARA Mess…

high September 15, 2026

stoecklin-kuechen.ch Listed by SafePay Ransomware Group

The company is based in Aesch near Basel and has developed from a traditional carpentry business founded by Ernst Stöcklin ……

high September 15, 2026

gob.pe Listed by SafePay Ransomware Group

It serves as the country's primary online point of contact between public institutions and citizens, providing government information, admin…

high September 15, 2026

laconcepcion.com.mx Listed by SafePay Ransomware Group

The organization identifies itself as one of the principal private healthcare providers in the region and serves patients from Coahuila ……

high September 15, 2026

neumerkel-gmbh.de Listed by SafePay Ransomware Group

The business traces its origins to 1963 and has operated under the Neumerkel GmbH name since 1994. Its product portfolio ……

high September 15, 2026

meterex.com Listed by SafePay Ransomware Group

The company is headquartered in Langenfeld, North Rhine-Westphalia, and is legally registered as Karl Kuntze (GmbH & Co.), HRA 16336 ……

high September 11, 2026

compunnel.com Listed by SafePay Ransomware Group

The company provides a combination of talent acquisition, IT consulting, digital engineering, artificial intelligence, cybersecurity, and wo…

high September 08, 2026

cenmar-manila.com Listed by SafePay Ransomware Group

The company was registered with the Philippine Securities and Exchange Commission in 1997 and received authorization to operate as a ……

high September 08, 2026

gsngestion.es Listed by SafePay Ransomware Group

The company is based in Villaviciosa de Odón, Madrid, and operates through the GSN Gestión brand. Its website states that ……

high September 08, 2026

gayafores.es Listed by SafePay Ransomware Group

The company is headquartered in Onda, Castellón, one of Europe's most important ceramic manufacturing regions. Established in 1949, Gayafore…

high September 08, 2026

hbpro.pt Listed by SafePay Ransomware Group

Established in 1994, the company has more than three decades of experience providing technology products, infrastructure, consulting, mainte…

high September 08, 2026

reichenau.at Listed by SafePay Ransomware Group

The official website, reichenau.at, serves as the municipality's central digital information and service platform for residents, businesses,…

high September 08, 2026

mcnishsteel.com Listed by SafePay Ransomware Group

The company is headquartered in Edmonton, Alberta, and was founded in 1978 by William and Wallace McNish. It has developed ……

high September 08, 2026

assiprime.it Listed by SafePay Ransomware Group

The company provides insurance brokerage, risk-management, financial consulting, and related assistance services to private individuals, bus…

high September 08, 2026

recoverycafe.org Listed by SafePay Ransomware Group

The organization was founded in 2003 and opened its first physical café in Seattle in 2004. Its approach is based ……

high September 08, 2026

cannonpuntana.com Listed by SafePay Ransomware Group

The company operated in Argentina and was historically connected with the manufacture and distribution of fragrances, toiletries, and person…

medium September 08, 2026

Recovery Cafe Listed by Safepay Ransomware

Safepay ransomware group published recoverycafe.org as a victim. The Seattle-based nonprofit operates community cafes supporting recovery fr…

high September 08, 2026

palmettoeyeinstitute.com Listed by SafePay Ransomware Group

The practice was founded by Dr. Prat Itharat, a board-certified ophthalmologist who specializes in cataract surgery and comprehensive eye ca…

high August 25, 2026

industry.airliquide.kr Listed by SafePay Ransomware Group

Air Liquide has operated in South Korea for several decades and supplies essential gases and related technologies to major industries, ……

high August 24, 2026

lagegepesca.it Listed by SafePay Ransomware Group

Based in Lallio, near Bergamo in Lombardy, the company traces its origins to 1957, when Santo Gavazzi established a small ……

high August 14, 2026

granjarinya.com Listed by SafePay Ransomware Group

Headquartered in Albal, Valencia, the family-owned company traces its origins to three generations of livestock farming. What began as a ……

high August 14, 2026

granjarinya.com Listed by SafePay Ransomware Group

Headquartered in Albal, Valencia, the family-owned company traces its origins to three generations of livestock farming. What began as a ……

high August 03, 2026

southshorerecycling.com Listed by SafePay Ransomware Group

The company specializes in metal recycling, concrete and asphalt recycling, aggregate production, and construction waste processing for comm…

high August 03, 2026

azn.co.jp Listed by SafePay Ransomware Group

Founded in 1991, the company specializes in comprehensive asset management, inheritance planning, business succession consulting, real estat…

high August 03, 2026

pradotuylaw.com Listed by SafePay Ransomware Group

The firm focuses on practice areas including personal injury, wrongful death, workplace harassment, business litigation, civil settlements, …

high August 03, 2026

hanan-hov.co.il Listed by SafePay Ransomware Group

Headquartered in Neve Yamin, Israel, the company provides comprehensive logistics support for construction, infrastructure, industrial, and …

high August 03, 2026

cpu-ag.com Listed by SafePay Ransomware Group

Founded in 1981 and headquartered in Friedberg, Bavaria, the company has more than four decades of experience developing specialized softwar…

high August 03, 2026

multiaqua.com Listed by SafePay Ransomware Group

Founded in 1999, the company specializes in the design, engineering, and production of air-cooled water chillers, heat pump chillers, hydron…

high August 03, 2026

new-point.it Listed by SafePay Ransomware Group

Headquartered in Signa, Florence, Italy, the company was founded in 2006 and has grown into one of Italy's established suppliers ……

high August 03, 2026

naskdoorinc.com Listed by SafePay Ransomware Group

Headquartered in West Chester, Pennsylvania, the company has served customers throughout southeastern Pennsylvania and northern Delaware for…

high August 03, 2026

simonrack.com Listed by SafePay Ransomware Group

Headquartered in Alfamén, Zaragoza, Spain, the company has been manufacturing metal shelving since 1964 and has become one of Europe's ……

high July 27, 2026

moebelmayer.de Listed by SafePay Ransomware Group

Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serv…

high July 27, 2026

weier.org Listed by SafePay Ransomware Group

The company specializes in representing manufacturers of plumbing, heating, water treatment, pumping, drainage, and building services equipm…

high July 27, 2026

landesmuseum.de Listed by SafePay Ransomware Group

Established in 1919, the museum preserves and presents more than 50,000 years of human cultural history, ranging from prehistoric artifacts …

high July 27, 2026

zinorm.de Listed by SafePay Ransomware Group

Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serv…

high July 27, 2026

haugbuersten.de Listed by SafePay Ransomware Group

Although the company in its current industrial form was founded in 1962, its family-owned brush-making tradition dates back to 1836, ……

high July 27, 2026

paritaet-nrw.org Listed by SafePay Ransomware Group

Headquartered in Wuppertal, the organization represents approximately 3,100 legally independent member organizations operating more than 7,0…

high July 27, 2026

hst.eu Listed by SafePay Ransomware Group

Headquartered in Kressbronn am Bodensee, Germany, the company traces its mechanical engineering heritage back to 1950, while the original te…

high July 27, 2026

bnpdist.com Listed by SafePay Ransomware Group

Headquartered in New York City, the company has been operating since 1979 and supplies restaurants, hotels, retailers, and wine merchants ……

high July 27, 2026

braywoodschool.co.uk Listed by SafePay Ransomware Group

Founded in 1858, the school has more than 165 years of educational history and serves children from early years through ……

high July 27, 2026

landesmuseum.de Listed by SafePay Ransomware Group

Established in 1919, the museum preserves and presents more than 50,000 years of human cultural history, ranging from prehistoric artifacts …

high July 24, 2026

gvsurgicalarts.com Listed by SafePay Ransomware Group

Founded in 2004 by Dr. Brian R. Chisdak, the practice has grown into one of Montana's leading surgical centers and ……

high July 24, 2026

upland.k12.ca.us Listed by SafePay Ransomware Group

The district provides comprehensive education from kindergarten through twelfth grade and operates 14 schools, including elementary, junior …

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.