The ransomware claim alleges that the threat actor safepay targeted ferienwohnungen.de, a prominent German online booking platform, resulting in potential data encryption and service disruption. The impacted country is #Germany.
Incident Details
- Victim: ferienwohnungen.de
- Country: DE
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/ferienwohnungende/
- Discovered: 2025-08-26 09:49:01.707267
- Published: 2025-08-26 09:48:49.552411
Information
- Ferienwohnungen.de is a German online booking platform connecting travelers to over 77,000 holiday homes and apartments across Europe.
- The platform was targeted by the actor SafePay in a ransomware attack.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.