Ransom! recoverycafe.org (SEP-2026)

Ransom! recoverycafe.org (SEP-2026)
Recoverycafe.org, a US organization founded in 2003 and which opened its first physical café in Seattle in 2004, was targeted in a ransomware incident involving threat actor safepay. The attack impacted the organization in the United States. #UnitedStates

Incident Details

  • Victim: recoverycafe.org
  • Sector: Healthcare
  • Country: US
  • Actor: safepay
  • Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/recoverycafeorg/
  • Discovered: 2026-09-08T18:46:15.049192+00:00
  • Published: 2026-09-08T18:45:47.116207+00:00

Information

  • The organization was founded in 2003 and opened its first physical café in Seattle in 2004.
  • Its approach is based on…

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live