SafePay Claims Ransomware Incident at energyaction.com.au

Summary
SafePay claims it carried out a ransomware incident against energyaction[.]com.au, warning of data leakage and service disruption. The claim, reported by ransomware.live, is unconfirmed.
Key points
- The record names energyaction.com.au, an Australian energy management and consulting company, as the claimed victim.
- SafePay is identified as the ransomware actor; the claim is attributed to its leak-site post and monitored by ransomware.live.
- The group’s claim warns of potential data leakage and service disruption; neither outcome is independently confirmed.
- The claim was listed as discovered and published on May 1, 2026.
Article Details
- Victim
- energyaction.com.au
- Victim Domain
- energyaction.com.au
- Encryption Status
- Unknown; the reported incident is based on the group's unverified claim.
- Exfiltration Status
- Unknown; the source does not confirm exfiltration.
- Exfiltrated Data
- The claim warns of data leakage but does not specify what data was affected.
- Ransom Demand
- Not disclosed
- Leak Status
- No leak publication is reported; the claim warns of data leakage.
