The ransomware claim involves doversd.org, a public K-12 school district in Dover, Ohio, which has been targeted by the threat actor safepay. The attack has impacted the United States. #UnitedStates
Incident Details
- Victim: doversd.org
- Country: US
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/doversdorg/
- Discovered: 2025-11-12 19:25:27.542683
- Published: 2025-11-12 19:25:12.052707
Information
- The district experienced a ransomware attack.
- The threat actor involved was Safepay.
- The incident affected Dover City Schools, a public K-12 school district.
- The district is located in Dover, Ohio.
- The district serves approximately 2,650 students across multiple schools.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.