The ransomware claim involves the US-based professional accounting firm BTH CPA, which was targeted by the threat actor safepay. This incident highlights the importance of cybersecurity for financial service providers in the US. #UnitedStates
Incident Details
- Victim: bthcpa.com
- Country: US
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/bthcpacom/
- Discovered: 2025-09-01 19:10:21.825190
- Published: 2025-09-01 19:09:50.480686
Information
- The website bthcpa.com was targeted by ransomware.
- The incident involved the actor known as safepay.
- BTH CPA is a professional accounting and advisory firm operating in the United States.
- The firm offers a comprehensive range of financial services.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.