The threat actor safepay has claimed ransomware targeting constructiondprovost.com, a regional general contracting firm based in Mont-Tremblant, Canada, specializing in high-quality residential and light-commercial construction. The attack highlights the ongoing cybersecurity threats faced by the construction industry in Canada. #Canada
Incident Details
- Victim: constructiondprovost.com
- Country: CA
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/constructiondprovostcom/
- Discovered: 2025-10-24 21:24:45.537716
- Published: 2025-10-24 21:24:33.628747
Information
- ConstructionDonaldProvost.com became a victim of ransomware.
- The incident involved the actor Safepay.
- The firm is based in Mont-Tremblant, Canada.
- They specialize in high-quality residential and light-commercial construction.
Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.