CISA: SafePay Ransomware Hit over 600 Critical Infrastructure Orgs

CISA: SafePay ransomware hit over 600 critical infrastructure orgs

The Cybersecurity and Infrastructure Security Agency (CISA) says the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024.

FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024

The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks.

SafePay ransomware group has targeted hundreds this year, US agencies ...

CISA, FBI and Partners Warn Organizations of SafePay Ransomware Actors Targeting Multiple Critical Infrastructure Sectors

CISA, FBI and Partners Warn Organizations of SafePay Ransomware Actors Targeting Multiple Critical Infrastructure Sectors mnavarro Oct 21, 2026

CISA Warns SafePay Ransomware Has Hit 600+ Organizations and Destroyed Backup Systems

CISA has warned that SafePay ransomware actors have compromised at least 600 organizations across multiple critical infrastructure sectors, combining data… Read more →

SafePay Ransomware Has Affected 600+ Organizations by Exploiting VPNs and Backup Servers

SafePay ransomware has affected at least 600 separate victims across multiple critical infrastructure sectors, according to a joint government advisory released on October 20, 2026. Active since August 2024, the group has targeted businesses and essential services across North America, South America, Europe, and Australia, becoming one of the most active ransomware threats in 2026. […]