The ransomware claim targets tokyocivil.co.jp in Japan, attributed to the safepay threat actor. The incident impacts organizations supporting public infrastructure and civil engineering projects serving the Tokyo metropolitan area, resulting in disruption across #Japan
Incident Details
- Victim: tokyocivil.co.jp
- Sector: Construction
- Country: JP
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/tokyocivilcojp/
- Discovered: 2026-06-15T19:27:00.543824+00:00
- Published: 2026-06-15T19:26:48.748989+00:00
Information
- Established in 2020, the company specializes in public infrastructure and civil engineering projects, serving primarily the Tokyo metropolitan area.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.