The ransomware claim alleges that the threat actor safepay targeted the US victim gvsurgicalarts.com, disrupting operations at the practice founded in 2004 by Dr. Brian R. Chisdak as it grew into one of Montana’s leading surgical centers. The impacted country(s): #UnitedStates
Incident Details
- Victim: gvsurgicalarts.com
- Sector: Healthcare
- Country: US
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/gvsurgicalartscom/
- Discovered: 2026-07-24T21:59:13.423298+00:00
- Published: 2026-07-24T21:58:57.270005+00:00
Information
- Founded in 2004 by Dr. Brian R. Chisdak, the practice has grown into one of Montana’s leading surgical centers.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.