Ransomware Group: SAFEPAY

VICTIM NAME: proexequialesresurgir[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SAFEPAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page related to the organization associated with the domain name proexequialesresurgir.com was discovered on January 15, 2025. It highlights a cyber incident involving the group known as “safepay”. The leak suggests that a total of 12 users’ information may have been compromised, and the website itself appears to be tied to activities in Colombia. The description indicates this site is presumably related to services of a funeral or memorial nature, as inferred from the name “Proexequiales Resurgi”. Although specific details about the nature of the compromise are not provided, the context suggests a significant security incident requiring further investigation.

The leakage includes a screenshot displaying elements of internal documents or communications relevant to the situation, indicating the kind of data that may have been accessed. There are mentions of five download links potentially available on the leak page, although specific details or contents are not disclosed to protect sensitive information. As of the last update on January 15, 2025, prior to the discovery, no employees or third-party entities appear to have been directly involved or impacted by the incident according to the leaked data’s metrics. This indicates it may have primarily affected regular users of the platform rather than corporate entities.