Safepay Claims Ransomware Attack Targeting harrisoncountywv.com

Summary
Safepay allegedly claimed an attack on harrisoncountywv[.]com, with disruption to county Commission operations reported. The monitoring post attributes the claim to the group; the information is unconfirmed.
Key points
- The record identifies harrisoncountywv[.]com as the victim and Safepay as the actor.
- The claim is attributed to a post on Safepay’s blog and is monitored by ransomware.live.
- The post alleges disruption to the Commission’s executive administrative operations.
- The article says the claim is unconfirmed and offers to share an official statement if one becomes available.
- The claim was listed on May 18, 2026.
Article Details
- Victim
- harrisoncountywv.com
- Victim Domain
- harrisoncountywv.com
- Claim Date
- 2026-05-18
- Encryption Status
- Unknown
- Encrypted Size
- Unknown
- Exfiltration Status
- Unknown
- Exfiltrated Data
- Unknown
- Exfiltrated Size
- Unknown
- Ransom Demand
- Unknown
- Leak Status
- A claim was posted on Safepay's blog; publication of leaked data is not established, and the claim is unconfirmed.
