Skip to content
← All breaches
Threat actor tracker 577 incidents tracked

SafePay — every breach we're tracking

Running log of incidents attributed to or claimed by SafePay in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked577
Latest activitySeptember 15, 2026
TypeRansomware / extortion

Groups like SafePay steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 577 incidents we've attributed to SafePay.

high September 15, 2026

marlinhvac.com Listed by SafePay Ransomware Group

Founded in 1989 by Michael and Richard Pellino, the company has developed more than three decades of experience in mechanical ……

high September 15, 2026

triniticaring.org Listed by SafePay Ransomware Group

The organization is jointly owned by Guardian Angels Senior Services of Elk River and Cassia, an Augustana/Elim affiliation. Its headquarter…

high September 15, 2026

ryomo.co.jp Listed by SafePay Ransomware Group

Established in January 1970 as a regional computer-services center, the company has developed into a publicly listed systems integrator prov…

high September 15, 2026

ryomo.co.jp Listed by SafePay Ransomware Group

Established in January 1970 as a regional computer-services center, the company has developed into a publicly listed systems integrator prov…

high September 15, 2026

ara-lyss.ch Listed by SafePay Ransomware Group

Its headquarters and main wastewater-treatment facility are located at Industriering 28 in Lyss. The organization also operates the ARA Mess…

high September 15, 2026

stoecklin-kuechen.ch Listed by SafePay Ransomware Group

The company is based in Aesch near Basel and has developed from a traditional carpentry business founded by Ernst Stöcklin ……

high September 15, 2026

gob.pe Listed by SafePay Ransomware Group

It serves as the country's primary online point of contact between public institutions and citizens, providing government information, admin…

high September 15, 2026

laconcepcion.com.mx Listed by SafePay Ransomware Group

The organization identifies itself as one of the principal private healthcare providers in the region and serves patients from Coahuila ……

high September 15, 2026

neumerkel-gmbh.de Listed by SafePay Ransomware Group

The business traces its origins to 1963 and has operated under the Neumerkel GmbH name since 1994. Its product portfolio ……

high September 15, 2026

meterex.com Listed by SafePay Ransomware Group

The company is headquartered in Langenfeld, North Rhine-Westphalia, and is legally registered as Karl Kuntze (GmbH & Co.), HRA 16336 ……

high September 11, 2026

compunnel.com Listed by SafePay Ransomware Group

The company provides a combination of talent acquisition, IT consulting, digital engineering, artificial intelligence, cybersecurity, and wo…

high September 08, 2026

reichenau.at Listed by SafePay Ransomware Group

The official website, reichenau.at, serves as the municipality's central digital information and service platform for residents, businesses,…

high September 08, 2026

mcnishsteel.com Listed by SafePay Ransomware Group

The company is headquartered in Edmonton, Alberta, and was founded in 1978 by William and Wallace McNish. It has developed ……

high September 08, 2026

assiprime.it Listed by SafePay Ransomware Group

The company provides insurance brokerage, risk-management, financial consulting, and related assistance services to private individuals, bus…

high September 08, 2026

recoverycafe.org Listed by SafePay Ransomware Group

The organization was founded in 2003 and opened its first physical café in Seattle in 2004. Its approach is based ……

high September 08, 2026

cannonpuntana.com Listed by SafePay Ransomware Group

The company operated in Argentina and was historically connected with the manufacture and distribution of fragrances, toiletries, and person…

medium September 08, 2026

Recovery Cafe Listed by Safepay Ransomware

Safepay ransomware group published recoverycafe.org as a victim. The Seattle-based nonprofit operates community cafes supporting recovery fr…

high September 08, 2026

palmettoeyeinstitute.com Listed by SafePay Ransomware Group

The practice was founded by Dr. Prat Itharat, a board-certified ophthalmologist who specializes in cataract surgery and comprehensive eye ca…

high September 08, 2026

hbpro.pt Listed by SafePay Ransomware Group

Established in 1994, the company has more than three decades of experience providing technology products, infrastructure, consulting, mainte…

high September 08, 2026

gayafores.es Listed by SafePay Ransomware Group

The company is headquartered in Onda, Castellón, one of Europe's most important ceramic manufacturing regions. Established in 1949, Gayafore…

high September 08, 2026

gsngestion.es Listed by SafePay Ransomware Group

The company is based in Villaviciosa de Odón, Madrid, and operates through the GSN Gestión brand. Its website states that ……

high September 08, 2026

cenmar-manila.com Listed by SafePay Ransomware Group

The company was registered with the Philippine Securities and Exchange Commission in 1997 and received authorization to operate as a ……

high August 25, 2026

industry.airliquide.kr Listed by SafePay Ransomware Group

Air Liquide has operated in South Korea for several decades and supplies essential gases and related technologies to major industries, ……

high August 24, 2026

lagegepesca.it Listed by SafePay Ransomware Group

Based in Lallio, near Bergamo in Lombardy, the company traces its origins to 1957, when Santo Gavazzi established a small ……

high August 14, 2026

granjarinya.com Listed by SafePay Ransomware Group

Headquartered in Albal, Valencia, the family-owned company traces its origins to three generations of livestock farming. What began as a ……

high August 14, 2026

granjarinya.com Listed by SafePay Ransomware Group

Headquartered in Albal, Valencia, the family-owned company traces its origins to three generations of livestock farming. What began as a ……

high August 03, 2026

southshorerecycling.com Listed by SafePay Ransomware Group

The company specializes in metal recycling, concrete and asphalt recycling, aggregate production, and construction waste processing for comm…

high August 03, 2026

azn.co.jp Listed by SafePay Ransomware Group

Founded in 1991, the company specializes in comprehensive asset management, inheritance planning, business succession consulting, real estat…

high August 03, 2026

pradotuylaw.com Listed by SafePay Ransomware Group

The firm focuses on practice areas including personal injury, wrongful death, workplace harassment, business litigation, civil settlements, …

high August 03, 2026

hanan-hov.co.il Listed by SafePay Ransomware Group

Headquartered in Neve Yamin, Israel, the company provides comprehensive logistics support for construction, infrastructure, industrial, and …

high August 03, 2026

cpu-ag.com Listed by SafePay Ransomware Group

Founded in 1981 and headquartered in Friedberg, Bavaria, the company has more than four decades of experience developing specialized softwar…

high August 03, 2026

multiaqua.com Listed by SafePay Ransomware Group

Founded in 1999, the company specializes in the design, engineering, and production of air-cooled water chillers, heat pump chillers, hydron…

high August 03, 2026

new-point.it Listed by SafePay Ransomware Group

Headquartered in Signa, Florence, Italy, the company was founded in 2006 and has grown into one of Italy's established suppliers ……

high August 03, 2026

naskdoorinc.com Listed by SafePay Ransomware Group

Headquartered in West Chester, Pennsylvania, the company has served customers throughout southeastern Pennsylvania and northern Delaware for…

high August 03, 2026

simonrack.com Listed by SafePay Ransomware Group

Headquartered in Alfamén, Zaragoza, Spain, the company has been manufacturing metal shelving since 1964 and has become one of Europe's ……

high July 27, 2026

moebelmayer.de Listed by SafePay Ransomware Group

Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serv…

high July 27, 2026

weier.org Listed by SafePay Ransomware Group

The company specializes in representing manufacturers of plumbing, heating, water treatment, pumping, drainage, and building services equipm…

high July 27, 2026

landesmuseum.de Listed by SafePay Ransomware Group

Established in 1919, the museum preserves and presents more than 50,000 years of human cultural history, ranging from prehistoric artifacts …

high July 27, 2026

zinorm.de Listed by SafePay Ransomware Group

Founded in 1952 and headquartered in Ahrensburg, Schleswig-Holstein, the family-owned company has more than seventy years of experience serv…

high July 27, 2026

haugbuersten.de Listed by SafePay Ransomware Group

Although the company in its current industrial form was founded in 1962, its family-owned brush-making tradition dates back to 1836, ……

high July 27, 2026

paritaet-nrw.org Listed by SafePay Ransomware Group

Headquartered in Wuppertal, the organization represents approximately 3,100 legally independent member organizations operating more than 7,0…

high July 27, 2026

hst.eu Listed by SafePay Ransomware Group

Headquartered in Kressbronn am Bodensee, Germany, the company traces its mechanical engineering heritage back to 1950, while the original te…

high July 27, 2026

bnpdist.com Listed by SafePay Ransomware Group

Headquartered in New York City, the company has been operating since 1979 and supplies restaurants, hotels, retailers, and wine merchants ……

high July 27, 2026

braywoodschool.co.uk Listed by SafePay Ransomware Group

Founded in 1858, the school has more than 165 years of educational history and serves children from early years through ……

high July 27, 2026

landesmuseum.de Listed by SafePay Ransomware Group

Established in 1919, the museum preserves and presents more than 50,000 years of human cultural history, ranging from prehistoric artifacts …

high July 24, 2026

gvsurgicalarts.com Listed by SafePay Ransomware Group

Founded in 2004 by Dr. Brian R. Chisdak, the practice has grown into one of Montana's leading surgical centers and ……

high July 24, 2026

upland.k12.ca.us Listed by SafePay Ransomware Group

The district provides comprehensive education from kindergarten through twelfth grade and operates 14 schools, including elementary, junior …

high July 20, 2026

lbb-treuhand.de Listed by SafePay Ransomware Group

The company specializes in tax consulting, auditing, accounting, payroll administration, financial reporting, and business advisory services…

high July 20, 2026

wdk.de Listed by SafePay Ransomware Group

Founded in 1950 and headquartered in Frankfurt am Main, the organization serves as the central voice of German manufacturers of ……

high July 20, 2026

jaecklin-industrial.de Listed by SafePay Ransomware Group

Founded in 1935 by Julius Jäcklin, the company has developed from a regional machine repair workshop into a globally recognized ……

high July 20, 2026

industriesjaro.com Listed by SafePay Ransomware Group

Over several decades, Jaro has evolved from manufacturing telephone booths into a supplier of advanced outdoor enclosures, interactive kiosk…

high July 20, 2026

stroebel-gruppe.de Listed by SafePay Ransomware Group

Headquartered in Langenzenn, Bavaria, the company was founded in 1978 by Gerlinde and Gerhard Ströbel and has grown from a ……

high July 20, 2026

timetex.de Listed by SafePay Ransomware Group

The company traces its origins to 1991, when the TimeTEX brand was acquired and expanded into a comprehensive supplier of ……

high July 20, 2026

acsmallmaxwell.com.au Listed by SafePay Ransomware Group

Founded in 1916 by Ambrose Cecil Small, the firm has provided professional accounting and financial services to businesses and individuals ……

high July 20, 2026

cenesco.de Listed by SafePay Ransomware Group

Founded in 1998, the company provides comprehensive information technology solutions for small and medium-sized enterprises (SMEs), helping …

high July 20, 2026

mende-grundbesitz.de Listed by SafePay Ransomware Group

Founded in 1994, the company specializes in the professional administration of residential, commercial, and mixed-use real estate throughout…

high July 20, 2026

timetex.de Listed by SafePay Ransomware Group

The company traces its origins to 1991, when the TimeTEX brand was acquired and expanded into a comprehensive supplier of ……

high July 20, 2026

cenesco.de Listed by SafePay Ransomware Group

Founded in 1998, the company provides comprehensive information technology solutions for small and medium-sized enterprises (SMEs), helping …

high July 13, 2026

shuttlemeadowcc.com Listed by SafePay Ransomware Group

Founded in 1917, the club is one of the oldest and most prestigious private golf clubs in New England. It ……

high July 06, 2026

bmiprojects.de Listed by SafePay Ransomware Group

Originally operating under the name Bez Marine Interiors GmbH, the company built on decades of experience in the maritime industry ……

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.