The safepay threat actor has targeted the furniture-retail company rehmann.de in Velbert, Germany, encrypting critical data and demanding ransom. This incident impacts Germany.
Incident Details
- Victim: rehmann.de
- Country: DE
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/rehmannde/
- Discovered: 2025-11-24 15:08:46.424721
- Published: 2025-11-24 15:08:33.536035
Information
- The company is a furniture-retail business located in Velbert, Germany.
- It operates a furniture house and a high-end studio for home furnishings.
- It is considered a mid-sized company.
- The ransomware attack was carried out by the actor Safepay.
Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.