The ransomware claim targets Berlinmobil.de, a German transportation company headquartered in Berlin specializing in bus charter services, passenger transportation, school transport, and mobility solutions, and is attributed to the safepay threat actor. The impacted country(s) are #Germany.
Incident Details
- Victim: Berlinmobil.de
- Sector: Transportation/Logistics
- Country: DE
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/berlinmobilde/
- Discovered: 2026-05-18T15:55:06.892240+00:00
- Published: 2026-05-18T15:54:54.003356+00:00
Information
- Berlinmobil.de is a German transportation company headquartered in Berlin.
- It specializes in bus charter services, passenger transportation, school transport, and mobility solutions.
- The company is associated with the safepay ransomware actor.
Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.