The ransomware claim alleges that the threat actor safepay targeted tdunhamcpa.com, a CPA firm based in Jackson, Wyoming, disrupting its online services. The incident impacts the United States.
Incident Details
- Victim: tdunhamcpa.com
- Country: US
- Actor: safepay
- Source: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion#tdunhamcpa
- Discovered: 2025-06-24 21:13:39.731555
- Published: 2025-06-24 21:12:48.072927
Information
- Ransomware incident affected the website tdunhamcpa.com.
- The site is associated with Tracy Dunham, a CPA based in Jackson, Wyoming.
- The services offered include tax preparation, planning, representation for small business owners, individuals, estates, and trusts.
- The practice also provides bookkeeping, payroll, QuickBooks consulting, and financial planning services.
- The attack was carried out by the actor Safepay.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.