The ransomware claim targets lh-wohnverbund-wohnen-nrw.de in DE, attributed to the threat actor safepay. safepay is described as specializing in residential care, supported living, and social assistance for children, adolescents, and adults with intellectual and developmental #Germany
Incident Details
- Victim: lh-wohnverbund-wohnen-nrw.de
- Sector: Consumer Services
- Country: DE
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/lh-wohnverbund-wohnen-nrwde/
- Discovered: 2026-07-06T19:39:39.886913+00:00
- Published: 2026-07-06T19:39:26.744992+00:00
Information
- Specializes in providing residential care, supported living, and social assistance for children, adolescents, and adults with intellectual and developmental needs.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.