The website gruposancristobal.com.mx has been targeted by the threat actor safepay, resulting in ransomware infection. The attack has impacted Mexico.
Incident Details
- Victim: gruposancristobal.com.mx
- Country: MX
- Actor: safepay
- Source: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion#gruposancristobal
- Discovered: 2025-05-29 12:53:57.874082
- Published: 2025-05-29 12:52:48.758791
Information
- The victim is associated with gruposancristobal.com.mx.
- The incident occurred in Mexico (MX).
- The actor involved in the ransomware attack is Safepay.
- No additional AI-generated information is available regarding this case.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.