Safepay Claims Ransomware Attack on Marlin HVAC

Summary

A ransomware group identified as Safepay claimed an attack on Marlin HVAC, listed as marlinhvac[.]com. The monitoring post gives September 15, 2026, as the discovery and publication date and says the claim is unconfirmed.

Key points

• The post attributes the ransomware claim to Safepay and identifies Marlin HVAC as the victim.
• The record lists September 15, 2026, as both the discovery and publication date.
• The post says it is based on public claims by the ransomware group and that the information has not been independently confirmed.
• The record identifies the victim as a U.S. manufacturing company. It provides no specific details about affected data or the nature of the disruption.

People

Threat Actors

Countries

Industries

Related Articles

• CYFIRMA Reports Record 1,178 Ransomware Victim Claims in Octobercyfirma.comSafepay
• CYFIRMA Report Tracks January 2026 Ransomware Trends and Tacticsgithub.com/jacobdjwilsonSafepay
• Sophos 2026 Active Adversary Report: Identity Failures Dominate Initial Accessgithub.com/jacobdjwilsonSafepay
• Health-ISAC 2026 Report Highlights Ransomware and Supply Chain Risks in Healthcaregithub.com/jacobdjwilsonSafepay
• Hornetsecurity 2026 Report Finds Malware Emails Rose 131% in 2025github.com/jacobdjwilsonSafepay