The safepay threat actor has claimed responsibility for a ransomware attack targeting notar-gerresheim.de, a private notary office in Düsseldorf’s Gerresheim district, Germany. The incident has resulted in operational disruptions for the notarial services in Germany. #Germany
Incident Details
- Victim: notar-gerresheim.de
- Country: DE
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/notar-gerresheimde/
- Discovered: 2025-12-17 20:25:27.628373
- Published: 2025-12-17 20:25:15.511438
Information
- The private notary office is located in the Gerresheim district of Düsseldorf, Germany.
- The ransomware attack was carried out by the actor safepay.
- The victim’s website is notar-gerresheim.de.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.