[SAFEPAY] – Ransomware Victim: spring-green[.]com/petbutler[.]com

image

Ransomware Group: SAFEPAY

VICTIM NAME: spring-green[.]com/petbutler[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SAFEPAY Onion Dark Web Tor Blog page.


AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to a company involved in consumer services, specifically operating under the brands Spring-Green.com and PetButler.com. These services are focused on lawn care and pet waste removal, catering to both residential and commercial clients in the United States. The leak was discovered on May 29, 2025, and the attack date is recorded as May 29, 2025, at approximately 02:45 UTC. The page includes a screenshot of leaked data, which appears to contain business-related information, though no sensitive personal data is disclosed in the available content. The incident underscores potential vulnerabilities faced by service providers managing customer-facing operations in this sector.

The leak is associated with the group known as “safepay,” and a URL linking to a protected onion site is provided for further details. The leak page also features an image, which shows a screenshot possibly displaying internal documents or data related to the company’s operations. There are no explicit mentions of specific data types leaked, such as customer lists or financial records, but the presence of a screenshot suggests that confidential operational details might have been compromised. Overall, this breach highlights the cybersecurity risks confronting companies providing essential consumer services in the United States, emphasizing the importance of robust security measures to protect business operations and customer trust.


A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

To keep up to date follow us on the below channels.