The ransomware claim appears to be linked to the threat actor safepay targeting bisa.com.pe, a Peruvian environmental consulting firm, in an effort to compromise its operations. This incident impacts Peru.
Incident Details
- Victim: bisa.com.pe
- Country: PE
- Actor: safepay
- Source: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion#bisa
- Discovered: 2025-07-22 19:20:27.243083
- Published: 2025-07-22 19:19:55.657360
Information
- BISA is a Peruvian company specialized in environmental consulting.
- Founded in 1992, it provides guidance on environmental management for businesses.
- Services offered include environmental impact assessments, soil studies, water management, and recovery programs for degraded areas.
- The company primarily serves the mining sector but also collaborates with other industries.
Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.