SafePay Claims RecoveryCafe.org as a Ransomware Victim

Summary
A ransomware.live monitoring post attributes a claim involving RecoveryCafe.org to SafePay, with a September 8, 2026 publication date. The post says the information comes from the group and could not be confirmed.
Key points
- The monitoring post names RecoveryCafe.org as the victim and SafePay as the actor.
- The post was published and the claim recorded on September 8, 2026.
- The source is a SafePay post; the article says the claim could not be confirmed.
- The article identifies the organization’s sector as healthcare.
Article Details
- Victim
- Recoverycafe.org
- Victim Domain
- recoverycafe.org
- Claim Date
- 2026-09-08
- Encryption Status
- Unknown
- Exfiltration Status
- Unknown
- Ransom Demand
- Unknown
- Leak Status
- Unknown
