Ransomware Group: SAFEPAY

VICTIM NAME: hlb[.]ie

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SAFEPAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The leak page pertains to a ransomware attack targeting the domain associated with the financial services sector, specifically the website hlb.ie, based in Ireland. The attack was discovered on July 16, 2025, at around 21:50 UTC, indicating recent compromise activity. The page provides a claim URL, which leads to a dark web site used for leak announcements and data dissemination, but specific details about the leaked information are not disclosed publicly. The presence of a screenshot indicates that the attackers have documented some of the compromised data visually, such as internal screenshots or data summaries, though explicit content or sensitive details are not included in this summary.

The ransomware group responsible appears to operate under the alias ‘safepay,’ and the attack targets financial institutions, emphasizing the seriousness of this incident. There is no mention of sensitive personal or company PII being leaked publicly, and the description provided indicates that the data involved may be limited or non-specific. The leak includes download links or samples of data, which are typical for such leaks, but exact content details are not revealed here. The attack highlights the ongoing security challenges faced by financial sector organizations, stressing the importance of robust cybersecurity measures to prevent and mitigate such breaches.