SafePay ransomware group targets critical infrastructure

The SafePay ransomware group has compromised over 600 critical infrastructure organisations across North America, South America, Europe, and Australia since 2024, using diverse attack methods and a double extortion model. Authorities recommend multifactor authentication, offline backups, network segmentation, and patching vulnerabilities to mitigate risks.

This Wire brief sits within Fusion42's coverage of Cybersecurity, and 7 sources have reported it between 20 Oct 2026 and 22 Oct 2026.