Clark Mechanical Inc., a California-based HVAC contractor, has reportedly been targeted by the threat actor SafePay in a ransomware attack. The incident raises concerns about the security of their operational and customer data amidst their longstanding service record.
Incident Details
- Victim: clarkmechanicalinc.com
- Country: US
- Actor: safepay
- Source: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion#clarkmechanicalinc
- Discovered: 2025-05-17 18:42:14.761284
- Published: 2025-05-17 18:40:54.534753
Information
- The company is Clark Mechanical, Inc., a mechanical contracting firm based in California.
- They specialize in commercial and industrial heating, ventilation, and air conditioning (HVAC) services.
- Their services include HVAC design, installation, repairs, and maintenance.
- The company is committed to delivering quality workmanship and excellent customer service.
- Clark Mechanical has been operational for over 25 years.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.