#SafePay
LightNews LightNews
cyberintelligence.bsky.social
🔴 by.zivor.co.il — listed by Safepay

📍 Israel · 7 Nov 2026
🏴 Safepay has listed 612 victims since November 2023.

https://cyberthreatintelligence.net/ransomware-victim/by-zivor-co-il-safepay-2026

#ransomware #safepay #threatintel
by.zivor.co.il — Ransomware Attack by Safepay
Based in Israel. Disclosed 7 Nov 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
November 7, 2026 at 9:00 PM
ransomlook.bsky.social
New post from #Safepay : By.Zivor.Co.Il
More at : https://www.ransomlook.io/group/Safepay #Ransomware
November 7, 2026 at 7:27 PM
sec-incidents.bsky.social
Ransomware-Angriff: Orthopädisches Zentrum #Ransomware #Einbruch #Datendiebstahl #infosec #TeamInfoSec #cyberangriff
Ransomware-Angriff: Orthopädisches Zentrum
Angriff von Ransomware-Gang Safepay.
https://www.security-incidents.de/sicherheitsvorfaelle/ransomware_angriff_orthopädisches-zentrum-13380.php
November 10, 2026 at 8:35 AM
ransomware.live
According to Ransomware.live, safepay ransomware group has added by.zivor.co.il (🇮🇱) to its victims.
November 7, 2026 at 7:48 PM
cyberintelligence.bsky.social
🧭 How Safepay is documented to operate
· Valid Accounts
· Replication Through Removable Media
· Drive-by Compromise
· Exploit Public-Facing Application

MITRE ATT&CK techniques attributed to Safepay overall — not a finding about how this organisation was reached.
November 7, 2026 at 9:00 PM
valerymarchive.bsky.social
📆 la #cyberattaque revendiquée le 04 novembre 2026 (safepay) contre 🇩🇪 fuss-sprunggelenk.de (fuss-sprunggelenk.de) semble survenue ~01 septembre 2026 🧐https://www.ransomware.live/#/recentcyberattacks
November 9, 2026 at 1:35 PM
ransomware.live
According to Ransomware.live, safepay ransomware group has added ehrenwall.de (🇩🇪) to its victims.
November 4, 2026 at 5:54 PM
ransomlook.bsky.social
New post from #Safepay : Prospecthillcamberwell.Com.Au
More at : https://www.ransomlook.io/group/Safepay #Ransomware
November 4, 2026 at 5:21 PM
ransomlook.bsky.social
New post from #Safepay : Valemany.Com
More at : https://www.ransomlook.io/group/Safepay #Ransomware
November 4, 2026 at 5:21 PM
ransomlook.bsky.social
New post from #Safepay : Ehrenwall.De
More at : https://www.ransomlook.io/group/Safepay #Ransomware
November 4, 2026 at 5:21 PM
ransomlook.bsky.social
New post from #Safepay : Ruscopackaging.Com
More at : https://www.ransomlook.io/group/Safepay #Ransomware
November 4, 2026 at 5:21 PM
cyberintelligence.bsky.social
🔴 ruscopackaging.com — listed by Safepay

📍 United States · Manufacturing · 4 Nov 2026
🏴 Safepay has listed 591 victims since November 2023.

https://cyberthreatintelligence.net/ransomware-victim/ruscopackaging-com-safepay-2026

#ransomware #safepay #threatintel
ruscopackaging.com — Ransomware Attack by Safepay
Based in United States. Manufacturing sector. Disclosed 4 Nov 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
November 4, 2026 at 7:01 PM
ransomlook.bsky.social
New post from #Safepay : Titres-Services.Net
More at : https://www.ransomlook.io/group/Safepay #Ransomware
November 4, 2026 at 5:21 PM
ransomlook.bsky.social
New post from #Safepay : Jhz-Bernardshof.De
More at : https://www.ransomlook.io/group/Safepay #Ransomware
November 4, 2026 at 5:21 PM
ransomlook.bsky.social
New post from #Safepay : Sportschule-Steinbach.De
More at : https://www.ransomlook.io/group/Safepay #Ransomware
November 4, 2026 at 5:21 PM
ransomlook.bsky.social
New post from #Safepay : Fuss-Sprunggelenk.De
More at : https://www.ransomlook.io/group/Safepay #Ransomware
November 4, 2026 at 5:21 PM
cyberintelligence.bsky.social
🔴 valemany.com — listed by Safepay

📍 Spain · 4 Nov 2026
🏴 Safepay has listed 591 victims since November 2023.

https://cyberthreatintelligence.net/ransomware-victim/valemany-com-safepay-2026

#ransomware #safepay #threatintel
valemany.com — Ransomware Attack by Safepay
Based in Spain. Disclosed 4 Nov 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
November 4, 2026 at 7:00 PM
ecrime.ch
New claim on the shame-site for #ransomware / #datatheft group #SAFEPAY.

Organization: רמת אקדמי באר יעקב
Location: #Israel
Industry: #PrimaryAndSecondaryEducation

Learn more: https://ecrime.ch/
November 7, 2026 at 10:55 PM
cyberintelligence.bsky.social
🔴 ehrenwall.de — listed by Safepay

📍 Germany · Other · 4 Nov 2026
🏴 Safepay has listed 591 victims since November 2023.

https://cyberthreatintelligence.net/ransomware-victim/ehrenwall-de-safepay-2026

#ransomware #safepay #threatintel
ehrenwall.de — Ransomware Attack by Safepay
Based in Germany. Other sector. Disclosed 4 Nov 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
November 4, 2026 at 7:03 PM
cyberintelligence.bsky.social
🔴 prospecthillcamberwell.com.au — listed by Safepay

📍 Australia · Other · 4 Nov 2026
🏴 Safepay has listed 591 victims since November 2023.

https://cyberthreatintelligence.net/ransomware-victim/prospecthillcamberwell-com-au-safepay-2026

#ransomware #safepay #threatintel
prospecthillcamberwell.com.au — Ransomware Attack by Safepay
Based in Australia. Other sector. Disclosed 4 Nov 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
November 4, 2026 at 7:01 PM
falconfeedsio.bsky.social
NB: The group intends to publish the data within 2–3 days.

🔍 Key Details:

🛡️ Threat Actor: SAFEPAY
📅 Reported on: 07/11/2026
November 7, 2026 at 9:18 PM
cyberintelligence.bsky.social
🔴 sportschule-steinbach.de — listed by Safepay

📍 Germany · Education · 4 Nov 2026
🏴 Safepay has listed 591 victims since November 2023.

https://cyberthreatintelligence.net/ransomware-victim/sportschule-steinbach-de-safepay-2026

#ransomware #safepay #threatintel
sportschule-steinbach.de — Ransomware Attack by Safepay
Based in Germany. Education sector. Disclosed 4 Nov 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
November 4, 2026 at 7:01 PM
cyberintelligence.bsky.social
🔴 titres-services.net — listed by Safepay

📍 Belgium · Professional Services · 4 Nov 2026
🏴 Safepay has listed 591 victims since November 2023.

https://cyberthreatintelligence.net/ransomware-victim/titres-services-net-safepay-2026

#ransomware #safepay #threatintel
titres-services.net — Ransomware Attack by Safepay
Based in Belgium. Professional Services sector. Disclosed 4 Nov 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
November 4, 2026 at 7:00 PM
cyberintelligence.bsky.social
🔴 fuss-sprunggelenk.de — listed by Safepay

📍 Germany · Healthcare · 4 Nov 2026
🏴 Safepay has listed 591 victims since November 2023.

https://cyberthreatintelligence.net/ransomware-victim/fuss-sprunggelenk-de-safepay-2026

#ransomware #safepay #threatintel
fuss-sprunggelenk.de — Ransomware Attack by Safepay
Based in Germany. Healthcare sector. Disclosed 4 Nov 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
November 4, 2026 at 7:03 PM
cyberintelligence.bsky.social
🔴 jhz-bernardshof.de — listed by Safepay

📍 Germany · Hospitality · 4 Nov 2026
🏴 Safepay has listed 591 victims since November 2023.

https://cyberthreatintelligence.net/ransomware-victim/jhz-bernardshof-de-safepay-2026

#ransomware #safepay #threatintel
jhz-bernardshof.de — Ransomware Attack by Safepay
Based in Germany. Hospitality sector. Disclosed 4 Nov 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
November 4, 2026 at 7:03 PM