SafePay ransomware group claims by.zivor.co.il on its leak site
The SafePay ransomware group claims by.zivor.co.il on its leak site, per RansomLook. The claim is unverified, so watch for an official statement.
- Published
- Ecosystem
- Websites and CMS
- Exploitation
- No, only a leak-site claim reported by a tracker, not confirmed by the victim
What happened
According to a RansomLook headline dated 2026-11-07, the SafePay ransomware group has claimed by.zivor.co.il on its leak site. RansomLook tracks claims that groups post on their leak sites. A listing like this one is a claim by the group and does not prove anything happened.
Only the headline could be fetched, so the full article could not be reviewed. The victim has not confirmed the claim. No independent outlet has verified it, and no source in the data reports any further detail. The nature of any incident, the entry point, and whether any data was taken are not confirmed.
Am I affected?
Not confirmed. The available headline does not say what data, systems or users the claim covers, if any. If you have a relationship with by.zivor.co.il, you cannot tell from this source alone whether you are affected.
What to do now
- Watch for an official statement from by.zivor.co.il confirming or denying an incident.
- Check the RansomLook entry for updates to the listing.
- Treat unexpected messages that refer to this claim with caution, and verify them through known contact channels before you respond.