The threat actor safepay targeted knightgroup.co.uk, a UK-based precision metal stockist and processor with a long history dating back to 1943, resulting in a ransomware claim. The incident impacted the United Kingdom. #UnitedKingdom
Incident Details
- Victim: knightgroup.co.uk
- Country: GB
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/knightgroupcouk/
- Discovered: 2025-12-29 20:12:49.446929
- Published: 2025-12-29 20:12:36.550263
Information
- Knight Group is a UK-based precision metal stockist and processor with a long history dating back to 1943.
- The company was affected by a ransomware attack.
- The actor responsible for the attack is identified as Safepay.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.