SafePay Ransomware Wipes Backups First

SafePay ransomware advisory AA26-293A: backups destroyed before encryption, October 2026

SafePay ransomware has compromised at least 600 organizations since August 2024, and a joint advisory published on October 20 says its operators halt shadow copies and reset backup storage before they encrypt anything. The FBI, CISA and the US Secret Service wrote it together with Germany’s Landeskriminalamt Rheinland-Pfalz and UK law enforcement (the National Crime…

Read More

Ransomware in Germany: From IT Incident to Insolvency Risk

Ransomware in Germany — idle production line symbolising a cyberattack-related operational shutdown

Ransomware in Germany is no longer an abstract IT concern — in 2026, it is one of the more concrete threats to whether a company survives at all. Two recent cases illustrate how differently this threat can play out. ZEGO Textilveredelungszentrum filed for insolvency following a cyberattack, without the attack type ever being publicly confirmed.…

Read More