Safepay Claims Attack on German Manufacturer shw-fr.de

Summary

Safepay claims it targeted shw-fr[.]de in Germany and disrupted business operations, according to ransomware.live, which cites the group’s leak-site post. The claim is unconfirmed; no victim statement is included.

Key points

• The listed victim is shw-fr[.]de, described as a German industrial manufacturer.
• Safepay claims it targeted the company and disrupted business operations; the article provides no independent confirmation.
• The post cites a Safepay leak-site entry and says the claim was monitored by ransomware.live.
• The claim was listed on July 6, 2026; no official statement from the affected organization is included.

Threat Actors

Malware

Countries

Related Articles

• Sophos 2026 Active Adversary Report: Identity Failures Dominate Initial Accessgithub.com/jacobdjwilsonSafepay
• US, UK and Germany Warn SafePay Ransomware Has Hit at Least 600 Victimsdatabreachtoday.comSafepay
• CISA Says SafePay Ransomware Has Hit More Than 600 Critical Infrastructure Organizationsbleepingcomputer.comSafepay
• Joint Advisory Details SafePay Ransomware Tactics and at Least 600 Victimsic3.govSafepay
• Joint Advisory Details SafePay Ransomware Tactics After at Least 600 Victimscisa.govSafepay