Federal advisory warns SafePay ransomware has hit at least 600 organizations

A joint federal advisory describes SafePay activity since August 2024, including use of exposed credentials, VPN access, edge-device vulnerabilities, and legitimate administrative tools. Data theft and backup destruction increase both privacy and recovery risks; patching, MFA, least privilege, and protected backups are key mitigations.