U.S. Agencies Report SafePay Has Affected at Least 600 Victims

Home Explore Pricing Blog Docs New Tracker

Get the App

Enterprise Threat Intel

A joint #StopRansomware advisory says SafePay has affected at least 600 victims since August 2024, including critical-infrastructure organizations. New reporting names five linked vulnerabilities across Cisco, Veeam, and SonicWall, and describes credential compromise, AD enumeration, backup disruption, exfiltration, and double extortion; consult the full advisory for exact CVEs, IOCs, and guidance.

Sources (3)

Updated Oct 22, 2026

Enterprise Threat Intel

FBI, CISA Warn SafePay Ransomware Has Hit 600+ Victims

FBI, CISA warn that SafePay ransomware poses threat to critical infrastructure

FBI Warns SafePay Ransomware Has Hit 600 Organizations — Here’s How Businesses Can Protect Themselves