Back Ransomware.Live

🏴‍☠️ Safepay has just published a new victim : ryomo.co.jp

Ransomware.Live • September 15, 2026

v=spf1 +ip4:202.213.43.0/24 +ip4:118.82.80.38 +ip4:202.213.33.0/24 include:spf.protection.outlook.com include:spfcm.cybermail.jp include:_spf.bownow.jp ~all

base44-domain-verification-6997ad=esYl0sq_hfG1HCyurXLW7NnxzPWpS6TlnYfAIuOzsRc

cisco-ci-domain-verification=69b40b10a0b1cf3c763a926f87e893e98475a1b44dfde1ba382f2c62c05b01a1

SG8LiNOq050uTbPuQB2wX+ZXwpMErw2hDhuj3nYGysSPPP9xgSybpdYvn4HH4pK47gjZtmsy82qjGdaPtF+NUQ==

apple-domain-verification=U3tFvJbgWPO5zMmh

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content . The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Ransomware Attacks Targeting Businesses on September 15, 2026 On September 15, 2026, the ransomware groups Qilin, Thegentlemen, and Safepay announced new victims, including ADM, Sarku Japan, and ryomo.co.jp, respectively. Each group has published details of their attacks on the Ransomware.Live platform. The attacks appear to be part of a broader trend of increasing ransomware activity targeting various sectors. Specific details regarding the attack vectors and methods remain unclear, but the victims are now publicly listed by the ransomware operators. The incident highlights the ongoing threat posed by ransomware groups, with organizations urged to enhance their cybersecurity measures. As of now, the impact on the affected companies is still being assessed. There are no reports of data being leaked publicly yet, but the situation is evolving. 4 sources 49

Extracted Entities

🏴‍☠️ Safepay has just published a new victim : ryomo.co.jp

The full story

Extracted Entities

Domains (4)

IP Addresses (3)

SHA256 Hashes (1)