Ransomware Group: SAFEPAY

VICTIM NAME: westwood

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SAFEPAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page related to the victim identified as Westwood presents significant information regarding a data compromise incident. It was discovered on November 19, 2024, with a published date also on the same date, indicating the timeliness of the leak. The data leak appears to involve a substantial volume, described as “ZIP-50GB,” with the company reportedly generating revenues of $8.1 million. While specific compromise details regarding the exact nature of the incident remain unspecified, the group associated with this breach is identified as SafePay. The victim operates in the United States.

The details on the page suggest the presence of two user accounts that may have been impacted, as indicated in the infostealer data section, which highlights vulnerabilities without exposing any personally identifiable information. Additionally, there are references to a single associated third-party domain under scrutiny. Although screenshots or specific graphic content were not provided, the overall presentation hints at sensitive data being available for download. The description of the compromise alongside the revenue details indicates a potential financial impact and risk to operational integrity for Westwood.