SafePay Claims Ransomware Attack on Palmetto Eye Institute

Summary

A ransomware.live monitoring post records SafePay’s claim targeting Palmetto Eye Institute in the US. The post says operations were disrupted but notes the group’s claims are unverified.

Key points

• The named victim is palmettoeyeinstitute[.]com, a US healthcare practice.
• The post attributes the claim to the SafePay ransomware group and links to its onion-site post.
• The record lists discovery and publication on September 8, 2026.
• The post says operations were disrupted and data availability threatened, but does not independently verify those claims.

People

Threat Actors

Industries

Related Articles

• CYFIRMA Reports Record 1,178 Ransomware Victim Claims in Octobercyfirma.comSafepay
• CYFIRMA Report Tracks January 2026 Ransomware Trends and Tacticsgithub.com/jacobdjwilsonSafepay
• Sophos 2026 Active Adversary Report: Identity Failures Dominate Initial Accessgithub.com/jacobdjwilsonSafepay
• Health-ISAC 2026 Report Highlights Ransomware and Supply Chain Risks in Healthcaregithub.com/jacobdjwilsonSafepay
• Hornetsecurity 2026 Report Finds Malware Emails Rose 131% in 2025github.com/jacobdjwilsonSafepay