Safepay Claims Ransomware Attack on German Construction Services Firm
Summary
Ransomware.live recorded an unverified Safepay claim targeting wolfusofsky[.]de in Germany, with the claim published and discovered on September 30, 2026.
Key points
- The listed victim is wolfusofsky[.]de, described as a construction and infrastructure services provider in Germany.
- The claim is attributed to the Safepay ransomware group and links to a post on its leak site.
- The record lists September 30, 2026, as the publication and discovery date.
- Ransomware.live says it cannot confirm the group's claims and invites an official statement from the affected organization.
Article Details
- Victim
- wolfusofsky.de
- Victim Domain
- wolfusofsky.de
- Claim Date
- 2026-09-30
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Unknown; the source does not report whether data was exfiltrated.
- Ransom Demand
- Unknown; no demand is reported.
- Leak Status
- safepay published a claim about the victim on its blog; the source cannot confirm the claim or report whether data was leaked.
Threat Actors
Countries
Industries
ConstructionThe group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate and Saarland, and nearby regions, impacting Germany #GermanyInfrastructureThe group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate and Saarland, and nearby regions, impacting Germany #Germany