Safepay Claims Ransomware Attack on Spanish Ceramics Manufacturer Gayafores

Summary
A ransomware.live record says Safepay claimed an attack on Spanish ceramics manufacturer Gayafores, with operational disruption and data-access impacts alleged. The post says the claims are unconfirmed.
Key points
- The record identifies Gayafores.es, a ceramics manufacturer headquartered in Onda, Spain, as the alleged victim.
- The claim is attributed to the Safepay ransomware group.
- The post alleges operational disruption and data-access impacts but says it cannot confirm the claims.
- The record lists the claim as published and discovered on September 8, 2026.
Article Details
- Victim
- Gayafores
- Victim Domain
- gayafores.es
- Claim Date
- 2026-09-08
- Encryption Status
- Unknown
- Exfiltration Status
- Unknown
- Ransom Demand
- Unknown
- Leak Status
- Listed on the SafePay blog as a ransomware claim; the source says the claim is unverified and does not confirm that data was leaked or published.
