Ransomware Group: SAFEPAY

VICTIM NAME: murraybuildingcompany[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SAFEPAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page provides information about Murray Building Company, a construction management and general contracting firm located in Birmingham, Alabama, United States. The company operates within the construction industry, focusing on sectors such as healthcare, retail, office, educational, and industrial projects. The incident was publicly disclosed on May 29, 2025, with the data breach discovered shortly thereafter. The page emphasizes the company’s commitment to quality and safety, but also indicates that sensitive data may have been accessed or compromised. The leak includes a screenshot showing internal documents or interfaces, hinting at the extent of the breach.

From the leak page, it’s noted that the attackers belong to a group called “safepay,” suggesting a targeted attack possibly involving data theft or extortion. No personal employee data or specific confidential project details are publicly visible. Download links or leaked data files are implied but not explicitly provided. The page contains visual evidence such as screenshots, which may include internal communications or project-related images, illustrating the severity of the breach. The incident underscores the increasing cybersecurity threats faced by construction firms, especially those involved in critical infrastructure projects across the US.