The ransomware claim targets awo-suedost.de, a German (DE) regional branch of the Arbeiterwohlfahrt (AWO), and attributes the attack to the safepay threat actor. The incident implicates Germany, as indicated by the affected entity’s location, #Germany
Incident Details
- Victim: awo-suedost.de
- Sector: Public Sector
- Country: DE
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/awo-suedostde/
- Discovered: 2026-07-01T20:36:12.146865+00:00
- Published: 2026-07-01T20:35:54.781631+00:00
Information
- Established in 1994, it is one of the regional branches of the Arbeiterwohlfahrt (AWO), one of Germany’s six largest independent welfare organizations.
Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.