VULNpocalypse
LowBreach / campaignMonitoring

SafePay ransomware group claims attack on fuss-sprunggelenk.de, per RansomLook

RansomLook reports the SafePay ransomware group listed fuss-sprunggelenk.de on its leak site, unconfirmed by the victim, so watch for official notices.

Published
Exploitation
No, only a ransomware leak-site claim reported by RansomLook, not independently verified

What happened

According to a RansomLook headline dated 2026-11-04, the SafePay ransomware group has claimed fuss-sprunggelenk.de on its leak site (RansomLook).

This is a claim made by the group. A leak-site listing does not prove that a breach happened. Only the headline was available, and the full article could not be reviewed. The following is not confirmed:

  • Whether fuss-sprunggelenk.de has confirmed any incident.
  • Whether anyone has independently verified the claim.
  • What data, if any, is involved, and how much.
  • The entry point or method of any attack.

Am I affected?

Not confirmed. The available source does not name affected users, systems or data types. The only people who might be affected are those who have a relationship with fuss-sprunggelenk.de, and only if the organisation confirms the claim.

What to do now

  1. Look for an official statement or notification from fuss-sprunggelenk.de before assuming any data exposure.
  2. Be wary of unsolicited messages that mention this claim or the organisation.
  3. Check this advisory again for updates if more sources become available.

Sources