Ransomware Group: SAFEPAY

VICTIM NAME: onnicar[.]it

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SAFEPAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the victim, identified as “onnicar.it,” falls within the Transportation and Logistics sector and is located in Italy. The leak indicates involvement with the group known as “Safepay.” The financial estimate for the victim’s revenue is reported at $23.2 million, reflecting the scale of operations and potential impact of the data breach. As of the discovery date on November 19, 2024, there were no employees, users, or third parties specified in relation to the leak. This absence of documented personnel may point to a minimal operational footprint or a lack of detailed documentation on affected individuals.

The content of the ransomware leak page does not specify any compromised date but was discovered on November 19, 2024, following an update on the same day. The absence of specific data leak details, such as names or sensitive information, helps to mitigate concerns about further risk of exposure. The page lacked images or screenshots, which may typically provide context to the leaked information. However, it underscores the necessity for entities in this industry to enhance their cybersecurity protocols to protect against potential future breaches while addressing their current vulnerabilities.