The victim, wachtmann.eu, an online retailer specializing in consumer goods, was targeted by the threat actor safepay in a ransomware attack. The attack disrupts their business operations in Germany, impacting their online web store’s functionality. #Germany
Incident Details
- Victim: wachtmann.eu
- Country: DE
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/wachtmanneu/
- Discovered: 2025-12-05 18:50:24.760480
- Published: 2025-12-05 18:50:10.591925
Information
- Ransomware attack targeted wachtmann.eu in Germany.
- Perpetrated by the threat actor safepay.
- The organization specializes in consumer goods distributed through an online web store.
- The business model is typical of small e-commerce companies, involving sourcing and other standard operational activities.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.