The threat actor safepay claims to have infiltrated alliancesteelco.com, a steel service center operating under the generic trade name “Alliance Steel” in North America. The impacted country is #UnitedStates.
Incident Details
- Victim: alliancesteelco.com
- Country: US
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/alliancesteelcocom/
- Discovered: 2025-09-17 20:13:28.679063
- Published: 2025-09-17 20:13:13.118032
Information
- Ransomware incident affected alliancesteelco.com in the US.
- Perpetrated by the actor known as safepay.
- “Alliance Steel” is a generic trade name used by various flat-rolled steel service centers across North America.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.