Category: Ransom Monitor

Gayafores.es, headquartered in Onda, Castellón, Spain’s major ceramic manufacturing region, was targeted by ransomware attributed to safepay, with the company established in 1949. The attack resulted in disruption of its operations and data access, impacting Spain. #Spain

assiprime.it in Italy, reported a ransomware attack attributed to the safepay threat actor, impacting its operations by encrypting or disrupting systems associated with its insurance brokerage, risk-management, and financial consulting services. The incident highlights disruption risks to businesses and professionals in the affected region, with impacts reported in #Italy

The ransomware incident targeted cannonpuntana.com in Argentina, with Threat Actor safepay claiming responsibility, affecting an enterprise historically connected to the manufacture and distribution of fragrances, toiletries, and personal-care products. The attack disrupted operations and data availability for the victim in #Argentina

The ransomware claim targets reichenau.at in Austria, attributed to the threat actor safepay. The official website, reichenau.at, serves as the municipality’s central digital information and service platform for residents, businesses, and visitors. #Austria

Ransomware by safepay targeted palmettoeyeinstitute.com in the US, impacting the ophthalmology practice founded by Dr. Prat Itharat, a board-certified cataract surgeon and provider of comprehensive eye care. The incident disrupted operations and threatened data availability, culminating in consequences for patients and staff in #UnitedStates

GT Distributors in the United States reported a ransomware incident involving the threat actor play, resulting in unauthorized access and disruption of operations. The affected systems and data were impacted by the attack, United States #UnitedStates

Red Star Oil in the United States was targeted by the play ransomware group, resulting in an attack impacting the organization’s systems and data availability. The incident reportedly involved encryption and disruption of operations affecting the victim. #UnitedStates

Sales Boomerang in the US was targeted by direwolf ransomware, with attacks impacting accounting/finance software, analytics & performance software, and customer relationship management systems. The disruption affected operations in #UnitedStates

mcnishsteel.com in Canada was targeted in a ransomware attack, allegedly executed by the safepay threat actor. The company is headquartered in Edmonton, Alberta, and was founded in 1978 by William and Wallace McNish. #Canada

Recoverycafe.org, a US organization founded in 2003 and which opened its first physical café in Seattle in 2004, was targeted in a ransomware incident involving threat actor safepay. The attack impacted the organization in the United States. #UnitedStates

akira targeted CreateASoft, a software company providing dynamic process improvement and predictive technology, with ransomware demanding payment after stealing and encrypting corporate data including employee/customer files, contacts, agreements, financials, and project information. #Unknown

Brentwood Country Club in the United States reported a ransomware impact attributed to the Akira threat actor, threatening to exfiltrate and encrypt corporate data including personal information, contacts, agreements, financials, and client/project materials. #UnitedStates

Brent Electric Inc., a UK electrical services company founded in 1996 and serving customers with generator sales and custom engraving, reported a ransomware incident linked to threat actor akira. The impacted data includes corporate and soon-to-be-uploaded files such as employee personal document scans, contacts and agreements, financials, customer files, projects, and NDAs, #UnitedKingdom

AuditTeam ransomware targeted Wi***IT in Ukraine, encrypting files and disrupting operations. The attack demanded a ransom to restore access, impacting Ukraine #Ukraine

The ransomware claim involves Mutant (Brazil), where the threat actor “thegentlemen” allegedly compromised the Brazilian CX & AI company (mutant.com.br) and targeted its enterprise AI-driven operations and customer experience platforms. The impacted country is: #Brazil