Ransomware Group: SAFEPAY

VICTIM NAME: bigotti[.]ro

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SAFEPAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page for Bigotti.ro, a Romania-based fashion company, was discovered on January 25, 2025. This company specializes in men’s clothing and accessories, offering a wide range of high-quality Italian designed items, such as suits, shirts, and shoes. Their focus on delivering stylish yet comfortable apparel caters to both formal and casual occasions, emphasizing customer service and satisfaction as core values. While the page lacks specific compromise details, it serves as a reminder of the vulnerabilities faced by businesses in the consumer services sector.

The ransomware group known as “Safepay” claims to have extracted data concerning 176 users along with details about four identified third parties linked to the victim. The group also indicated that they have URLs associated with 28 users, suggesting potential data leakage or exposure. This highlights the broader implications for customer privacy and data integrity in light of cyber threats affecting businesses globally. The disclosed information underlines the necessity for robust cybersecurity measures, particularly in the highly competitive fashion industry where consumer trust is paramount.