The ransomware attack by safepay reportedly targeted lbb-treuhand.de, a German tax consulting firm providing auditing, accounting, payroll administration, financial reporting, and business advisory services for private individuals and self-employed clients. The incident affected operations in #Germany
Incident Details
- Victim: lbb-treuhand.de
- Sector: Business Services
- Country: DE
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/lbb-treuhandde/
- Discovered: 2026-07-20T19:05:53.136745+00:00
- Published: 2026-07-20T19:05:38.934738+00:00
Information
- Specializes in tax consulting, auditing, accounting, payroll administration, financial reporting, and business advisory services for private individuals and self-employed clients.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.