rift.cysentrix
← Back to actors

Threat actor

Safepay

38 observed events

AISafepay has been observed conducting ransomware attacks targeting the consumer services, manufacturing, and agriculture and food production sectors in Germany, Italy, and Australia.

Activity type

Ransomware
38

Verification

Claim
38

Top sectors

Manufacturing
7
Business Services
4
Retail & E-Commerce
4
Education
3
Professional Services
2

Top countries

DE
15
US
7
AU
1
CA
1
ES
1

Observed events

Claim High Ransomware

azn.co.jp

Founded in 1991, the company specializes in comprehensive asset management, inheritance planning, business succession consulting, real estate advisory services, and …

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

southshorerecycling.com

The company specializes in metal recycling, concrete and asphalt recycling, aggregate production, and construction waste processing for commercial, industrial, and …

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

cpu-ag.com

Founded in 1981 and headquartered in Friedberg, Bavaria, the company has more than four decades of experience developing specialized software …

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

multiaqua.com

Founded in 1999, the company specializes in the design, engineering, and production of air-cooled water chillers, heat pump chillers, hydronic …

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

pradotuylaw.com

The firm focuses on practice areas including personal injury, wrongful death, workplace harassment, business litigation, civil settlements, and environmental litigation. …

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

naskdoorinc.com

Headquartered in West Chester, Pennsylvania, the company has served customers throughout southeastern Pennsylvania and northern Delaware for several decades. Although …

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

new-point.it

Headquartered in Signa, Florence, Italy, the company was founded in 2006 and has grown into one of Italy's established suppliers …

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

simonrack.com

Headquartered in Alfamén, Zaragoza, Spain, the company has been manufacturing metal shelving since 1964 and has become one of Europe's …

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

hanan-hov.co.il

Headquartered in Neve Yamin, Israel, the company provides comprehensive logistics support for construction, infrastructure, industrial, and commercial projects throughout the …

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

pradotuylaw.com

AISafepay listed pradotuylaw.com, a professional-services firm, on its extortion site, claiming a data leak. This unverified claim, tracked by Ransomware.live, is not confirmed.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

naskdoorinc.com

AISafepay claims to have listed naskdoorinc.com, a manufacturing firm, on its extortion site per Ransomware.live. This is an unverified claim.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

new-point.it

AISafepay has listed new-point.it, a technology-sector organization, on an extortion site per Ransomware.live. This is an unverified claim of a data leak; no details are confirmed.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

simonrack.com

AISafepay has listed simonrack.com, a manufacturing firm, on its extortion site, claiming to have compromised the organization. This is an unverified claim.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

hanan-hov.co.il

AISafepay listed hanan-hov.co.il on its extortion site per Ransomware.live. The claim is unverified.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

azn.co.jp

AISafepay claims to have listed azn.co.jp, a retail and e-commerce company, on an extortion site (per Ransomware.live). This is an unverified claim.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

southshorerecycling.com

AISafepay claims to have listed southshorerecycling.com, a manufacturing organization, on its extortion site. This is an unverified claim.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

cpu-ag.com

AISafepay claims to have listed cpu-ag.com, a Manufacturing-sector organization, on its extortion site per Ransomware.live. This is an unverified claim, not a confirmed breach.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

multiaqua.com

AISafepay claims to have listed multiaqua.com, an agriculture and food production organization, on its extortion site. This is an unverified data-leak claim, per Ransomware.live, with no confirmation of a breach.

Actor Safepay 1 source
Records Undisclosed
Claim High Ransomware

zinorm.de

Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serving customers …

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

moebelmayer.de

AISafepay claims to have compromised German furniture retailer moebelmayer.de (retail/e-commerce).

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

paritaet-nrw.org

AISafepay claims to have listed professional services organization Parität NRW (paritaet-nrw.org) on its extortion site.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

haugbuersten.de

AISafepay claims to have listed haugbuersten.de, a retail and e-commerce entity, on their extortion site. This is an unverified claim from Ransomware.live.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

landesmuseum.de

AISafepay claims to have breached landesmuseum.de, an educational organization, as listed on their extortion site, though this claim is unverified.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

hst.eu

AISafepay claims to have compromised hst.eu, an unverified claim, according to a ransomware extortion listing tracked by Ransomware.live.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

braywoodschool.co.uk

AIThreat actor Safepay claims to have listed education sector organization braywoodschool.co.uk on its extortion site.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

weier.org

AISafepay claims to have breached weier.org, per an unverified listing on Ransomware.live.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

bnpdist.com

AISafepay claims to have breached bnpdist.com, a retail and e-commerce firm, based on an extortion site listing. The claim is unverified.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

upland.k12.ca.us

AISafepay claims to have listed data from education organization upland.k12.ca.us on extortion site Ransomware.live.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

gvsurgicalarts.com

AISafepay claims to have breached healthcare organization gvsurgicalarts.com, as listed on its extortion site. The claim is unverified.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

wdk.de

AISafepay claims to have breached wdk.de, as listed on Ransomware.live.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

jaecklin-industrial.de

AISafepay claims to have breached jaecklin-industrial.de, a manufacturing organization. The listing is unverified.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

lbb-treuhand.de

AISafepay claims to have listed business services firm lbb-treuhand.de on its extortion site.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

timetex.de

AISafepay claims to have listed timetex.de, a business services organization, on its extortion site.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

stroebel-gruppe.de

AISafepay claims to have listed stroebel-gruppe.de (Manufacturing) on its extortion site; this is an unverified claim.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

industriesjaro.com

AISafepay claims to have listed manufacturing firm industriesjaro.com on their extortion site; this is an unverified claim.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

cenesco.de

AISafepay claims to have listed cenesco.de on its extortion site.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

acsmallmaxwell.com.au

AISafepay has listed acsmallmaxwell.com.au, a Business Services organization, on their extortion site. This is an unverified claim.

Actor Safepay 2 sources
Records Undisclosed
Claim High Ransomware

mende-grundbesitz.de

AISafepay claims to have breached mende-grundbesitz.de, a business services company, listing it on their extortion site. The claim is unverified.

Actor Safepay 2 sources
Records Undisclosed