rift.cysentrix
← Back to actors

Threat actor

Safepay

13 observed events

AISafepay has been observed conducting ransomware attacks targeting the consumer services, manufacturing, and agriculture and food production sectors in Germany, Italy, and Australia.

Activity type

Ransomware
13

Verification

Claim
13

Top sectors

Consumer Services
2
Agriculture and Food Production
1
Manufacturing
1

Top countries

DE
3
IT
2
AU
1

Observed events

Claim High Ransomware

ehg.bayern

AISafepay claims to have listed eh

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

seinordovest.it

AISafepay claims to have breached seinordovest.it, according to their extortion site listing; the claim is unverified.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

harcourts.net

AIHarcourts.net, a Consumer Services organization, was claimed to be listed by the Safepay group on their extortion site.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

zaunsysteme.de

AISafepay claims to have breached zaunsysteme.de, a manufacturing firm, in an unverified extortion site listing.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

brscappuccio.it

AISafepay claims to have breached brscappuccio.it, a Consumer Services organization, according to a listing on its extortion site (Ransomware.live). This is an unverified claim.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

gut-heckenhof.de

AISafepay listed gut-heckenhof.de, an organization in agriculture and food production, on its extortion site in an unverified claim.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

hughstirling.co.uk

AISafepay claims to have breached hughstirling.co.uk, listing the organization on its extortion site. This claim is unverified.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

tokyocivil.co.jp

AISafepay claims to have data from tokyocivil.co.jp, listing it on its extortion site. The claim is unverified.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

kawaius.com

AIThreat actor Safepay has listed kawaius.com on RansomLook, claiming to have attacked the organization. The listing is unverified.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

musenet.co.jp

AISafepay claims to have listed musenet.co.jp on its extortion site, per RansomLook; this is an unverified claim.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

bautz-maschinenbau.de

AISafepay listed bautz-maschinenbau.de on its extortion site, claiming to have breached it. The claim is unverified.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

aquaclean.com

AISafepay claims to have listed aquaclean.com on its extortion site; the claim is unverified.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

hoodriversheriff.com

AISafepay listed hoodriversheriff.com on its extortion site, claiming to have breached the organization. The claim is unverified.

Actor Safepay 1 source
Records Undisclosed