Ransomware Group: SAFEPAY

VICTIM NAME: brunetti[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SAFEPAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page concerning Brunetti, a notable establishment in the hospitality and tourism sector based in Melbourne, Australia, was discovered and published on January 21, 2025. Brunetti has been serving its customers since 1985, offering a delightful array of authentic Italian cuisine, which includes gourmet pizzas, pastas, gelato, and a diverse selection of pastries and desserts. The incident possibly exposes sensitive data related to the operations of Brunetti, known for its European ambiance and catering services, although specific details regarding the nature and extent of this exposure remain unspecified in the leak documentation.

The leak denotes the affiliation of Brunetti with a group named “safepay,” suggesting potential ransom demands or information exchanges associated with this group. The absence of visual content on the leak page likely indicates that no sensitive images or screenshots were shared in this instance. The information available reflects an establishment significant to the Melbourne culinary scene, emphasizing its wide-ranging offerings for both dine-in and online takeaway orders. As with many establishments facing such incidents, the ramifications on customer trust and operational integrity could be significant, warranting a thorough analysis of the potential implications of this breach.