SafePay Claims lh-wohnverbund-wohnen-nrw.de as a Victim

Summary
A ransomware.live monitoring post attributes a claim against lh-wohnverbund-wohnen-nrw[.]de to SafePay and links it to the group’s blog. The post says the claim is unconfirmed.
Key points
- The monitoring post names lh-wohnverbund-wohnen-nrw[.]de in Germany as the claimed victim.
- The claim is attributed to the SafePay ransomware group and linked to its onion blog.
- The post says it is based on public group claims and that their accuracy could not be confirmed.
- The organization is described as providing residential care, supported living, and social assistance.
Article Details
- Victim
- lh-wohnverbund-wohnen-nrw.de
- Victim Domain
- lh-wohnverbund-wohnen-nrw.de
- Claim Date
- 2026-07-06
- Encryption Status
- Unknown; not reported
- Exfiltration Status
- Unknown; not reported
- Ransom Demand
- Not disclosed
- Leak Status
- The source reports a Safepay claim listing the victim; the claim and any leaked data are unverified.
