Back to Threat Groups

safepay

ACTIVE

ransomware group

SafePay is a double-extortion ransomware group that emerged in late 2024, quickly attracting attention for its professional-grade leak site and high victim count in a short period. The group targets organizations across multiple sectors in North America and Europe and is notable for its operational security and polished infrastructure. The group's origin and affiliations remain under investigation, though code analysis suggests possible links to LockBit 3.0.

Victims
630
records
First Discovered
Nov 19, 2024
victim
Last Discovered
Nov 12, 2026
victim
Inactive Since
2
days
Countries
54
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
71
Dec
2025
6
Jan
2026
8
Feb
2026
8
Mar
2026
10
Apr
2026
42
May
2026
21
Jun
2026
33
Jul
2026
12
Aug
2026
32
Sep
2026
22
Oct
2026
11
Nov
2026

Victims (630)

toyokiki-thailand.com

safepay🇹🇭 TH
2d ago

Established in 2013 as a subsidiary of Toyokiki Industrial Co., Ltd. of Japan, the company specializes in manufacturing and processing …

Manufacturing2.0Published
toyokiki-thailand.com

by.zivor.co.il

safepay🇮🇱 IL
7d ago

The organization was established to provide an educational framework combining traditional Jewish studies, academic education and professional development. Its ...

2.0Published
by.zivor.co.il

prospecthillcamberwell.com.au

safepay🇦🇺 AU
10d ago

The organization provides residential accommodation and lifestyle services for older Australians seeking independent living in a secure and socially connected …

Other1.0Published
prospecthillcamberwell.com.au

jhz-bernardshof.de

safepay🇩🇪 DE
10d ago

Established in 1928, the organization provides residential, semi-residential and outpatient support services for children, adolescents and young adults who requ...

Hospitality1.0Published
jhz-bernardshof.de

ehrenwall.de

safepay🇩🇪 DE
10d ago

Founded in 1880, the institution has a long history of providing specialized psychiatric and psychological healthcare services. It focuses primarily …

Other9.0Published
ehrenwall.de

ruscopackaging.com

safepay🇺🇸 US
10d ago

Founded in 1972, the company specializes in supplying packaging materials, industrial equipment, replacement parts and technical services to manufacturing, ware...

Manufacturing3.0Published
ruscopackaging.com

valemany.com

safepay🇪🇸 ES
10d ago

The company operates as both a wholesale and retail travel agency, providing travel planning, reservation and tour organization services to …

1.0Published
valemany.com

titres-services.net

safepay🇧🇪 BE
10d ago

The company provides household assistance and cleaning services under Belgium's government-regulated service voucher (titres-services) system. Its activities pr...

Professional Services1.0Published
titres-services.net

sportschule-steinbach.de

safepay🇩🇪 DE
10d ago

Established in 1957, the institution is operated by Badischer Sportbund Freiburg e.V., the regional sports federation responsible for supporting organized …

Education2.0Published
sportschule-steinbach.de

fuss-sprunggelenk.de

safepay🇩🇪 DE
10d ago

The organization focuses on the diagnosis, treatment and surgical management of disorders affecting the foot, ankle joints and lower extremities. …

Healthcare1.0Published
fuss-sprunggelenk.de

deom.be

safepay🇧🇪 BE
12d ago

The company specializes in the distribution, installation, customization and maintenance of lifting equipment, truck-mounted cranes, forestry machinery and mate...

3.0Published
deom.be

uaa.mx

safepay🇲🇽 MX
19d ago

It provides undergraduate and postgraduate education across a broad range of academic disciplines, including engineering, natural sciences, health sciences, soc...

Education4.0Published
uaa.mx

mars-semi.com.tw

safepay🇹🇼 TW
19d ago

Established in 2001 and headquartered in Hsinchu Science Park, the company develops long-range, high-bandwidth wireless audio and video system-on-chip (SoC) …

Manufacturing3.0Published
mars-semi.com.tw

Rood Trucking

safepay🇺🇸 US
19d ago

Established in 1962 by George and Diane Rood Sr., the company developed from a single-truck operation into a regional carrier …

Transportation3.0Published

grifosespinoza.com

safepay🇵🇪 PE
19d ago

Headquartered in Lima, the company manages fuel stations that serve individual motorists, commercial customers and other transportation-related businesses. Its ...

Other3.0Published
grifosespinoza.com

jumonji-u.ac.jp

safepay🇯🇵 JP
19d ago

The institution is operated by Jumonji Gakuen Educational Corporation and focuses on providing undergraduate and postgraduate education in humanities, education...

Education3.5Published
jumonji-u.ac.jp

everon.com.ar

safepay🇦🇷 AR
19d ago

The company is headquartered in Resistencia, in Chaco Province, and specializes in providing fiber-optic internet connectivity to residential customers and …

Other3.0Published
everon.com.ar

goldencrops.com.tw

safepay🇹🇼 TW
19d ago

The company specializes in grain-based foods, nutritional products, plant-based foods and customized food manufacturing services. It operates three factories in...

Agriculture and Food Production3.5Published
goldencrops.com.tw

layam.com

safepay🇮🇱 IL
19d ago

Its product portfolio includes food and provisions, beverages, tobacco products, perfumes, cosmetics, electronics, confectionery, gifts and other duty-free merc...

3.0Published
layam.com

quevedo-ponce.com

safepay🇪🇨 EC
19d ago

Headquartered in Quito, the firm serves domestic and international clients, including businesses, investors, entrepreneurs and multinational companies operating...

Other3.5Published
quevedo-ponce.com

hiqbio.com

safepay🇺🇸 US
Oct 12, 2026

The company focuses on applying marine biotechnology to human health, animal health, functional foods and sustainable aquaculture. Its official website …

Healthcare3.0Published
hiqbio.com

dwi-bau.de

safepay🇩🇪 DE
Oct 9, 2026

The company specializes in building systems for metal roofs and facades, serving customers in the construction and building sectors. Its …

Other3.0Published
dwi-bau.de

Hotel Delfino Lugano

safepay🇨🇭 CH
Oct 9, 2026

The hotel was founded in 1972 and has been managed directly by the Haas family for four generations. Since 2001, …

Hospitality3.0Published
hoteldelfinolugano.ch

dd-automation.ch

safepay🇨🇭 CH
Oct 5, 2026

The company was entered into the Swiss commercial register in 1997 and specializes in electrical engineering, automation systems, conveyor technology, …

Manufacturing3.0Published
dd-automation.ch

stuecheli.ch

safepay🇨🇭 CH
Oct 5, 2026

The firm was founded by architect Werner Stücheli in 1946 and has developed into a third-generation architectural practice. It is …

Professional Services3.0Published
stuecheli.ch

bwi-bau.de

safepay🇩🇪 DE
Oct 5, 2026

The organization was established in October 1964 as a subsidiary of the Construction Industry Association of North Rhine-Westphalia. It originally …

Professional Services3.0Published
bwi-bau.de

Halservice

safepay🇮🇹 IT
Oct 5, 2026

Established in 1990, the company initially focused on system integration and information-technology services and later expanded into telecommunications followin...

Technology3.0Published
halservice.it

grundens.com

safepay🇺🇸 US
Oct 5, 2026

The company's origins can be traced to 1911, when Carl A. Grundén, the son of a fisherman from Grundsund on …

Manufacturing2.0Published
grundens.com

T-Systems

safepay🇩🇪 DE
Oct 5, 2026

Headquartered in Germany, the company operates internationally and has locations in 26 countries, employing more than 26,000 people. T-Systems specializes …

Technology3.0Published
t-systems.com

anwo.cl

safepay🇨🇱 CL
Oct 5, 2026

The company was established in 1984 by Víctor Herrmann and has developed into one of the major HVAC distribution businesses …

Manufacturing3.0Published
anwo.cl

duhaas.sk

safepay🇸🇰 SK
Oct 5, 2026

The company was subsequently transformed into a limited liability company in 1992 and established as a joint-stock company in 1994. …

Other3.0Published
duhaas.sk

iKHASAS Sdn. Bhd.

safepay🇲🇾 MY
Oct 5, 2026

The group was incorporated as iKHASAS Sdn. Bhd. in 2008 and subsequently expanded beyond construction into property development, hospitality, plantation, …

Construction3.0Published
ikhasas.com

sterrer.net

safepay🇳🇱 NL
Oct 5, 2026

The company has operated since 1979 and combines agricultural production with technical services for commercial poultry farms. Its activities include …

Agriculture3.0Published
sterrer.net

wolfusofsky.de

safepay🇩🇪 DE
Sep 30, 2026

The group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate, Saarland, neighboring …

Construction3.0Published
wolfusofsky.de

assist2enjoy.be

safepay🇧🇪 BE
Sep 30, 2026

The company was established in 2015 and operates primarily in the wholesale and retail market for electrical household appliances. Its …

Other3.0Published
assist2enjoy.be

econ-tec.com

safepay🇩🇪 DE
Sep 30, 2026

The company focuses on designing technical systems for industrial customers, combining engineering expertise with process optimization, automation and energy-ef...

Technology3.0Published
econ-tec.com

cromados.com

safepay🇪🇸 ES
Sep 28, 2026

The company's registered business activities include thermal treatment of metals, organic and electrolytic coatings, and the manufacture and commercialization o...

Manufacturing3.0Published
cromados.com

Auromex

safepay🇹🇭 TH
Sep 28, 2026

The company is headquartered in Samut Prakan Province and has more than five decades of experience in the surface-finishing industry. …

Manufacturing3.0Published
auromex.com

manno.ch

safepay🇨🇭 CH
Sep 28, 2026

The official website, manno.ch, provides residents, businesses and visitors with information about municipal administration, public services, local regulations,...

Government3.0Published
manno.ch

Holiday Inn Vilnius

safepay🇱🇹 LT
Sep 28, 2026

The property operates under the international Holiday Inn brand of IHG Hotels & Resorts. The hotel provides 134 guest rooms, …

Hospitality3.0Published

eagroep.com

safepay🇧🇪 BE
Sep 28, 2026

The group is headquartered in Deventer, Overijssel, and brings together several specialized business units operating in areas such as career …

Agriculture and Food Production3.0Published
eagroep.com

sumperk.cz

safepay🇨🇿 CZ
Sep 28, 2026

The official website, sumperk.cz, serves as the city's principal digital information and service portal for residents, businesses, visitors and other …

Government3.0Published
sumperk.cz

bio-strath.com

safepay🇨🇭 CH
Sep 28, 2026

The company was established in 1961 and operates the Bio-Strath brand, which is particularly associated with liquid and tablet nutritional …

Healthcare3.0Published
bio-strath.com

Fe del Mundo Medical Center

safepay🇵🇭 PH
Sep 28, 2026

The institution traces its origins to 1957, when Filipino pediatrician and scientist Dr. Fe del Mundo established Children's Memorial Hospital …

Healthcare3.0Published
fedelmundo.com.ph

lfgholding.com

safepay🇨🇭 CH
Sep 28, 2026

The company operates as an independent, partner-owned wealth-management group and manages a portfolio of specialized financial-services businesses. Its operatin...

Finance7.5Published
lfgholding.com

stoecklin-kuechen.ch

safepay🇨🇭 CH
Sep 15, 2026

The company is based in Aesch near Basel and has developed from a traditional carpentry business founded by Ernst Stöcklin …

Retail & E-Commerce2.0Published
stoecklin-kuechen.ch

ryomo.co.jp

safepay🇯🇵 JP
Sep 15, 2026

Established in January 1970 as a regional computer-services center, the company has developed into a publicly listed systems integrator providing …

2.0Published
ryomo.co.jp

ara-lyss.ch

safepay🇨🇭 CH
Sep 15, 2026

Its headquarters and main wastewater-treatment facility are located at Industriering 28 in Lyss. The organization also operates the ARA Messen …

Professional Services1.0Published
ara-lyss.ch

gob.pe

safepay🇵🇪 PE
Sep 15, 2026

It serves as the country's primary online point of contact between public institutions and citizens, providing government information, administrative procedures...

Healthcare1.0Published
gob.pe

marlinhvac.com

safepay🇺🇸 US
Sep 15, 2026

Founded in 1989 by Michael and Richard Pellino, the company has developed more than three decades of experience in mechanical …

Manufacturing1.5Published
marlinhvac.com

Infrastructure

leak site
ONLINE

unreachable

http://a5d3otrzcgbprssbut7fm7ykl2edbcrhzxi3g3qhs327jwp44yovi2id.onion/

8713ms

6h ago

leak site
ONLINE
http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion

4156ms

6h ago

leak site
OFFLINE

unreachable

http://oxly5vxvvhi5fv5vsvj3kvlqeprbijitycqisylaxzf324bn7e4qr2ad.onion

8842ms

1d ago

leak site
OFFLINE

unreachable

http://iieavvi4wtiuijas3zw4w54a5n2srnccm2fcb3jcrvbb7ap5tfphw6ad.onion/

8519ms

1d ago

leak site
OFFLINE

unreachable

http://crmbcdcdwoex6dzajbicgzrsuw2t76pomajwdpi2mb2babbfdgcc6xid.onion/

8578ms

1d ago

leak site
OFFLINE

unreachable

http://duslj3vgel72rilqlvvlo2qw6jybmvbcdmcm4n63kyivveeif6u2xrad.onion/

8120ms

1d ago

leak site
OFFLINE

unreachable

http://nz4z6ruzcekriti5cjjiiylzvrmysyqwibxztk6voem4trtx7gstpjid.onion

8916ms

1d ago

leak site
OFFLINE

unreachable

http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion/

8480ms

1d ago

leak site
OFFLINE

unreachable

http://dgcg5ncjab6scb7fnk7gx5php4lbpxjy2jjnu3apnkxyippqf6yhw3ad.onion

8496ms

1d ago

leak site
OFFLINE

unreachable

http://nj5qix45sxnl4h4og6hcgwengg2oqloj3c2rhc6dpwiofx3jbivcs6qd.onion

8699ms

1d ago

leak site
OFFLINE

unreachable

http://dwizzpmqny2ddazasljow3cdd4doqscouwywd3gz5jbsxvzerqx3lwid.onion/

8446ms

1d ago

leak site
OFFLINE

unreachable

http://4feb4566k5oqs5w4ksmbqcgduposx5r4oegkcngiedqfyhmtt3bxo4ad.onion/

8312ms

1d ago

leak site
OFFLINE

unreachable

http://fcde4o7iquaspdbo5yetwqn3rfueet2zfy3wjosrc5dznyccwbiz6oyd.onion/

8847ms

1d ago

leak site
OFFLINE

unreachable

http://qkzxzeabulbbaevqkoy2ew4nukakbi4etnnkcyo3avhwu7ih7cql4gyd.onion/

8071ms

1d ago