SafePay Claims Landesmuseum.de as a Ransomware Target

Summary
SafePay's leak-site post claims Landesmuseum[.]de in Germany was targeted; ransomware[.]live lists the claim. The claim is unconfirmed, and the article provides no incident details.
Key points
- The claim identifies Landesmuseum[.]de, a museum in Germany, as the target.
- The claim is attributed to the SafePay ransomware actor and linked to its leak-site post.
- ransomware[.]live is identified as the monitoring service; the claim was published and discovered on July 27, 2026.
- The article says it cannot confirm the claim's accuracy and provides no details about data, encryption, or operational impact.
Article Details
- Victim
- landesmuseum.de
- Victim Domain
- landesmuseum.de
- Claim Date
- 2026-07-27
- Encryption Status
- Unknown
- Exfiltration Status
- Unknown
- Ransom Demand
- Unknown
- Leak Status
- The safepay group made a public claim; the article does not report whether data was leaked or published.
