// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE PUB-ENTDTG 0600Z
ColdReconThreat GroupsSafePay
Threat Group Dossier

SafePay

CLEARED FOR PUBLIC RELEASE · OPEN-SOURCE INTELLIGENCE
SafePay — 3 attributed incidents across our corpus.
Incidents on file3
First seen2026-08-11
Last seen2026-09-19
Top sectorconstruction

Techniques observed (MITRE ATT&CK)

Sectors targeted

construction (2)

Attributed breaches

2026-09-19
ransomware
Ryomo Co., Ltd.
2026-08-12
ransomware
Nask Door Inc.
2026-08-11
ransomware
Nask Door Inc.

Track this in real time.

ColdRecon watches the public signal so you don't have to — a daily brief and a live detection-coverage desk. Request clearance.

Request Clearance →