SecBoard
Threat Intelligence

Leak Monitor

Was Ransomware- und Erpressergruppen auf ihren eigenen Seiten veröffentlichen — laufend eingesammelt und aufbereitet.

Stand 22.10.2026, 20:32

Behauptung des Angreifers, kein bestätigter Vorfall

Ein Eintrag auf einer Leak-Seite ist eine Veröffentlichung der Täter. Gruppen listen regelmäßig Organisationen, bei denen nie ein Vorfall stattfand, und einzelne Gruppen erfinden ihre Opferlisten vollständig. SecBoard gibt diese Einträge wieder, ohne sie zu bestätigen.

Einträge 24 h

42

Einträge 7 Tage

293

aktive Gruppen (30 T.)

97

Länder (30 T.)

75

safepay

53 Einträge insgesamt

Zeitraum: 14.08.2026 – 12.10.2026

Veröffentlichungskanäle

  • Leak-Seite · zuletzt nicht erreichbar
  • Leak-Seite · SAFEPAY · zuletzt nicht erreichbar
  • Dateiablage · zuletzt nicht erreichbar
  • Dateiablage · Welcome to nginx! · zuletzt nicht erreichbar
  • Dateiablage · 404 - Not Found · zuletzt nicht erreichbar
  • Dateiablage · Access denied · zuletzt nicht erreichbar
  • Chat · zuletzt nicht erreichbar
  • Dateiablage · 404 — Not Found · zuletzt nicht erreichbar

Kanäle laut RansomLook. Die Adressen der Leak-Seiten werden bewusst nicht angezeigt — sie führen direkt zu den erbeuteten Daten.

Medienecho

Meldungen, die den Gruppennamen neben einem Fachbegriff nennen. Kein Maß für die Schwere eines Vorfalls und kein Beleg, dass ein bestimmtes Opfer in der Presse stand.

Neueste Einträge

Filter zurücksetzen
safepayhiqbio.comUS
healthcare

Beschreibung der Täter

The company focuses on applying marine biotechnology to human health, animal health, functional foods and sustainable aquaculture. Its official website …

Herkunft

safepayhoteldelfinolugano.chCH

Beschreibung der Täter

The hotel was founded in 1972 and has been managed directly by the Haas family for four generations. Since 2001, …

Herkunft

safepaydwi-bau.deDE

Beschreibung der Täter

The company specializes in building systems for metal roofs and facades, serving customers in the construction and building sectors. Its …

Herkunft

safepaydd-automation.chCH

Beschreibung der Täter

The company was entered into the Swiss commercial register in 1997 and specializes in electrical engineering, automation systems, conveyor technology, …

Herkunft

safepaystuecheli.chCH

Beschreibung der Täter

The firm was founded by architect Werner Stücheli in 1946 and has developed into a third-generation architectural practice. It is …

Herkunft

safepaygrundens.comUS

Beschreibung der Täter

The company's origins can be traced to 1911, when Carl A. Grundén, the son of a fisherman from Grundsund on …

Herkunft

safepaystuecheli.chCH

Beschreibung der Täter

The firm was founded by architect Werner Stücheli in 1946 and has developed into a third-generation architectural practice. It is …

Herkunft

safepaybwi-bau.deDE

Beschreibung der Täter

The organization was established in October 1964 as a subsidiary of the Construction Industry Association of North Rhine-Westphalia. It originally …

Herkunft

safepayhalservice.itIT
telekommunikation

Beschreibung der Täter

Established in 1990, the company initially focused on system integration and information-technology services and later expanded into telecommunications following the …

Herkunft

safepaygrundens.comUS

Beschreibung der Täter

The company's origins can be traced to 1911, when Carl A. Grundén, the son of a fisherman from Grundsund on …

Herkunft

safepayt-systems.comDE

Beschreibung der Täter

Headquartered in Germany, the company operates internationally and has locations in 26 countries, employing more than 26,000 people. T-Systems specializes …

Herkunft

safepayanwo.clCL

Beschreibung der Täter

The company was established in 1984 by Víctor Herrmann and has developed into one of the major HVAC distribution businesses …

Herkunft

safepayduhaas.skSK

Beschreibung der Täter

The company was subsequently transformed into a limited liability company in 1992 and established as a joint-stock company in 1994. …

Herkunft

safepayduhaas.skSK

Beschreibung der Täter

The company was subsequently transformed into a limited liability company in 1992 and established as a joint-stock company in 1994. …

Herkunft

safepayikhasas.comMY

Beschreibung der Täter

The group was incorporated as iKHASAS Sdn. Bhd. in 2008 and subsequently expanded beyond construction into property development, hospitality, plantation, …

Herkunft

safepayikhasas.comKE

Beschreibung der Täter

The group was incorporated as iKHASAS Sdn. Bhd. in 2008 and subsequently expanded beyond construction into property development, hospitality, plantation, …

Herkunft

safepaysterrer.netNL

Beschreibung der Täter

The company has operated since 1979 and combines agricultural production with technical services for commercial poultry farms. Its activities include …

Herkunft

safepaysterrer.netNL

Beschreibung der Täter

The company has operated since 1979 and combines agricultural production with technical services for commercial poultry farms. Its activities include …

Herkunft

safepaywolfusofsky.deDE

Beschreibung der Täter

The group provides a broad range of construction and infrastructure services to public and private clients in Rhineland-Palatinate, Saarland, neighboring …

Herkunft

safepayecon-tec.comDE

Beschreibung der Täter

The company focuses on designing technical systems for industrial customers, combining engineering expertise with process optimization, automation and energy-efficient production …

Herkunft

safepayassist2enjoy.beBE

Beschreibung der Täter

The company was established in 2015 and operates primarily in the wholesale and retail market for electrical household appliances. Its …

Herkunft

safepaylfgholding.comCH

Beschreibung der Täter

The company operates as an independent, partner-owned wealth-management group and manages a portfolio of specialized financial-services businesses. Its operating companies …

Herkunft

safepayfedelmundo.com.phPH

Beschreibung der Täter

The institution traces its origins to 1957, when Filipino pediatrician and scientist Dr. Fe del Mundo established Children's Memorial Hospital …

Herkunft

safepaybio-strath.comCH
healthcare

Beschreibung der Täter

The company was established in 1961 and operates the Bio-Strath brand, which is particularly associated with liquid and tablet nutritional …

Herkunft

safepayeagroep.comBE

Beschreibung der Täter

The group is headquartered in Deventer, Overijssel, and brings together several specialized business units operating in areas such as career …

Herkunft

safepaysumperk.czCZ

Beschreibung der Täter

The official website, sumperk.cz, serves as the city's principal digital information and service portal for residents, businesses, visitors and other …

Herkunft

safepayHoliday Inn VilniusLT

Beschreibung der Täter

The property operates under the international Holiday Inn brand of IHG Hotels & Resorts. The hotel provides 134 guest rooms, …

Herkunft

safepaymanno.chCH

Beschreibung der Täter

The official website, manno.ch, provides residents, businesses and visitors with information about municipal administration, public services, local regulations, infrastructure, cultural …

Herkunft

safepayauromex.comMX

Beschreibung der Täter

The company is headquartered in Samut Prakan Province and has more than five decades of experience in the surface-finishing industry. …

Herkunft

safepaycromados.comES

Beschreibung der Täter

The company's registered business activities include thermal treatment of metals, organic and electrolytic coatings, and the manufacture and commercialization of …

Herkunft

safepaymarlinhvac.comUS

Beschreibung der Täter

Founded in 1989 by Michael and Richard Pellino, the company has developed more than three decades of experience in mechanical …

Herkunft

safepayneumerkel-gmbh.deDE

Beschreibung der Täter

The business traces its origins to 1963 and has operated under the Neumerkel GmbH name since 1994. Its product portfolio …

Herkunft

safepaytriniticaring.orgUS
healthcare

Beschreibung der Täter

The organization is jointly owned by Guardian Angels Senior Services of Elk River and Cassia, an Augustana/Elim affiliation. Its headquarters …

Herkunft

safepaylaconcepcion.com.mxMX

Beschreibung der Täter

The organization identifies itself as one of the principal private healthcare providers in the region and serves patients from Coahuila …

Herkunft

safepaymeterex.comDE

Beschreibung der Täter

The company is headquartered in Langenfeld, North Rhine-Westphalia, and is legally registered as Karl Kuntze (GmbH & Co.), HRA 16336 …

Herkunft

safepaystoecklin-kuechen.chCH

Beschreibung der Täter

The company is based in Aesch near Basel and has developed from a traditional carpentry business founded by Ernst Stöcklin …

Herkunft

safepayryomo.co.jpJP

Beschreibung der Täter

Established in January 1970 as a regional computer-services center, the company has developed into a publicly listed systems integrator providing …

Herkunft

safepayara-lyss.chCH

Beschreibung der Täter

Its headquarters and main wastewater-treatment facility are located at Industriering 28 in Lyss. The organization also operates the ARA Messen …

Herkunft

safepaygob.pePE

Beschreibung der Täter

It serves as the country's primary online point of contact between public institutions and citizens, providing government information, administrative procedures, …

Herkunft

safepaycompunnel.comUS

Beschreibung der Täter

The company provides a combination of talent acquisition, IT consulting, digital engineering, artificial intelligence, cybersecurity, and workforce management services to …

Herkunft

safepaygayafores.esES

Beschreibung der Täter

The company is headquartered in Onda, Castellón, one of Europe's most important ceramic manufacturing regions. Established in 1949, Gayafores has …

Herkunft

safepaycenmar-manila.comPH

Beschreibung der Täter

The company was registered with the Philippine Securities and Exchange Commission in 1997 and received authorization to operate as a …

Herkunft

safepaygsngestion.esES

Beschreibung der Täter

The company is based in Villaviciosa de Odón, Madrid, and operates through the GSN Gestión brand. Its website states that …

Herkunft

safepayhbpro.ptPT

Beschreibung der Täter

Established in 1994, the company has more than three decades of experience providing technology products, infrastructure, consulting, maintenance, and technical …

Herkunft

safepayrecoverycafe.org—

Beschreibung der Täter

The organization was founded in 2003 and opened its first physical café in Seattle in 2004. Its approach is based …

Herkunft

safepaymcnishsteel.comCA

Beschreibung der Täter

The company is headquartered in Edmonton, Alberta, and was founded in 1978 by William and Wallace McNish. It has developed …

Herkunft

safepaypalmettoeyeinstitute.comUS
healthcare

Beschreibung der Täter

The practice was founded by Dr. Prat Itharat, a board-certified ophthalmologist who specializes in cataract surgery and comprehensive eye care. …

Herkunft

safepayreichenau.atAT

Beschreibung der Täter

The official website, reichenau.at, serves as the municipality's central digital information and service platform for residents, businesses, and visitors. The …

Herkunft

safepayassiprime.itIT
finanzen

Beschreibung der Täter

The company provides insurance brokerage, risk-management, financial consulting, and related assistance services to private individuals, businesses, professionals, artisans, and commercial …

Herkunft

safepaycannonpuntana.comAR

Beschreibung der Täter

The company operated in Argentina and was historically connected with the manufacture and distribution of fragrances, toiletries, and personal-care products. …

Herkunft

safepayindustry.airliquide.krKR

Beschreibung der Täter

Air Liquide has operated in South Korea for several decades and supplies essential gases and related technologies to major industries, …

Herkunft

safepaylagegepesca.itIT

Beschreibung der Täter

Based in Lallio, near Bergamo in Lombardy, the company traces its origins to 1957, when Santo Gavazzi established a small …

Herkunft

safepaygranjarinya.com—

Beschreibung der Täter

Headquartered in Albal, Valencia, the family-owned company traces its origins to three generations of livestock farming. What began as a …

Herkunft

Land und Branche liefern Ransomware.live und ThreatCluster (dort nur für die selbst erhobenen Einträge); sonst werden sie aus dem Eintragstext abgeleitet. Belegt bei 61 % der Einträge — die übrigen erscheinen ohne Land.

Quellen sind die Aggregatoren RansomLook, ThreatCluster und Ransomware.live (von ThreatCluster nur die selbst erhobenen Einträge). Melden mehrere dasselbe Opfer, steht es einmal da — mehrere Quellen heißt: mehrere haben dieselbe Behauptung gelesen, nicht: der Vorfall ist bestätigt. Die Zuordnung zur Gruppe stammt aus der Quelle, nicht aus einer eigenen Attribution durch SecBoard. Es werden ausschließlich Metadaten verarbeitet — keine erbeuteten Daten.