Lipcare.de, operated by KHK GmbH in Germany, has fallen victim to a ransomware attack attributed to the threat actor safepay, Lipcare specializing in natural and conventional cosmetics. The incident has impacted Germany.#Germany
Incident Details
- Victim: lipcare.de
- Country: DE
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/lipcarede/
- Discovered: 2025-08-29 21:38:15.168350
- Published: 2025-08-29 21:38:02.828124
Information
- Lipcare.de was targeted by ransomware attackers.
- The attack was carried out by the actor safepay.
- Lipcare.de is operated by KHK GmbH in Germany.
- The company specializes in manufacturing natural and conventional cosmetics.
- The business has a particular focus on certain products, though unspecified here.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.