safepay
SafePay emerged in September 2024 as a rapidly growing ransomware operation that explicitly disavows the RaaS model and manages all operations internally, claiming over 300 victims worldwide by mid-2025 with a high-profile early attack against UK telematics firm Microlise stealing 1.2 TB of data.
observed victims (by country)
GermanyUnited StatesItalySpain
observed sectors
ManufacturingRetail & E-CommerceProfessional ServicesOther
62 victims · last active 14 Aug 2026
recent activity · our intel
source: ransomware.live1 refs →