Ransomware: safepay named neumerkel-gmbh.de (DE)
1. Executive summary On 2026-09-15, the ransomware leak-site index ransomware.live recorded the victim neumerkel-gmbh.de (Germany) as posted by a group
1. Executive summary On 2026-09-15, the ransomware leak-site index ransomware.live recorded the victim neumerkel-gmbh.de (Germany) as posted by a group
1. Executive summary On 2026-09-15, the ransomware leak-site indexer ransomware.live recorded a victim posting by a group calling itself "safepay"
1. Executive summary On 2026-09-08, the ransomware operator "safepay" listed the Spanish firm GSN Gestión (gsngestion.es, Villaviciosa de Odón, Madrid) as
1. Executive summary On 2026-09-08, the ransomware operator "safepay" publicly listed the Portuguese company hbpro.pt as a victim on its leak
1. Executive summary On 2026-09-08, the ransomware group "safepay" listed the Spanish ceramics manufacturer Gayafores (gayafores.es, headquartered in Onda, Castellón) as
1. Executive summary On 2026-09-08, the ransomware group operating under the name "safepay" publicly listed the Italian insurance brokerage and financial consulting
1. Executive summary On 2026-07-27, the ransomware group "safepay" listed the German organisation paritaet-nrw[.]org on its victim site. The victim
1. Executive summary On 2026-07-20, the group "safepay" publicly listed wdk.de — the Frankfurt am Main-based association of German manufacturers — as
1. Executive summary On 2026-07-20, the ransomware group "safepay" publicly claimed a victim, lbb-treuhand.de, a German tax consulting, auditing, accounting,
1. Executive summary On 2026-07-20, the ransomware group "safepay" publicly listed the German IT services company cenesco.de as a victim on