SafePay Claims Hanan-Hov.co.il as Ransomware Victim
Summary
Ransomware.live lists hanan-hov[.]co[.]il as a SafePay claim and alleges disruption to logistics operations in Israel. The post says the group's claims are unconfirmed.
Key points
- The monitoring record identifies hanan-hov[.]co[.]il as the victim and SafePay as the actor.
- The claim is attributed to a SafePay leak-site post and monitored by ransomware.live.
- The post alleges disruption to logistics operations and data availability in Israel; these claims are not independently confirmed.
- The record is dated August 3, 2026.
Article Details
- Victim
- Hanan-hov.co.il
- Victim Domain
- hanan-hov.co.il
- Claim Date
- 2026-08-03
- Encryption Status
- Unknown
- Exfiltration Status
- Unknown
- Leak Status
- A Safepay blog post made claims about the victim; the source says the claims are unconfirmed.
Threat Actors
Countries
Industries
CommercialHanan-hov.co.il, located in Israel, was targeted by the safepay ransomware threat actor, disrupting logistics operations for construction, infrastructure, industrial, and commercial projects.ConstructionHanan-hov.co.il, located in Israel, was targeted by the safepay ransomware threat actor, disrupting logistics operations for construction, infrastructure, industrial, and commercial projects.IndustrialHanan-hov.co.il, located in Israel, was targeted by the safepay ransomware threat actor, disrupting logistics operations for construction, infrastructure, industrial, and commercial projects.InfrastructureHanan-hov.co.il, located in Israel, was targeted by the safepay ransomware threat actor, disrupting logistics operations for construction, infrastructure, industrial, and commercial projects.logisticsHanan-hov.co.il, located in Israel, was targeted by the safepay ransomware threat actor, disrupting logistics operations for construction, infrastructure, industrial, and commercial projects.