VULNpocalypse
LowBreach / campaignMonitoring

SafePay ransomware group claims deom.be on its leak site, RansomLook reports

RansomLook reports the safepay ransomware group listed deom.be on its leak site, an unconfirmed claim, so watch for an official notice from deom.be.

Published
Exploitation
No, not confirmed: only a leak-site listing reported by RansomLook

What happened

The claim tracker RansomLook says the safepay ransomware group has listed deom.be on its leak site (RansomLook). RansomLook published its entry on 2026-11-02.

A listing on a ransomware leak site is the group’s own claim. It does not prove that an attack took place. According to the available source, deom.be has not confirmed any incident, and no independent outlet has verified the claim. Only the headline could be reviewed. The full article could not be read, so this advisory contains no detail beyond that headline.

The following details are not confirmed:

  • Whether any data was taken or systems were encrypted.
  • The entry point.
  • The type and volume of data involved.
  • Any timeline beyond the date of the listing.

Am I affected?

Not confirmed. The source does not say which people, customers or partners could be involved, if any. If you have a relationship with deom.be, any exposure depends on facts that have not been published.

What to do now

  1. Treat the listing as an unverified claim, as RansomLook reports it (RansomLook).
  2. Watch for an official statement or notification from deom.be.
  3. Check back for updates. This advisory will be revised if a confirmed or independent source appears.

Sources