Skip to content
" SAXONY

" SAXONY

X • October 31, 2026

🇩🇪 🚨 SAXONY-ANHALT STATE DEVELOPMENT COMPANY SALEG LISTED BY "PAYLOAD" RANSOMWARE GROUP

The Payload ransomware group has added SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH), the state-owned land and regional development company of the German state of Saxony-Anhalt, to its leak site.

SALEG manages urban renewal, redevelopment and monument-protection projects as a trustee for towns and municipalities across the state. The listing excerpt does not say how much data the group claims to have taken.

The claim has not been independently verified, and SALEG has not publicly confirmed a cyber incident.

As a public-sector trustee, SALEG is likely to hold project, contract and funding records shared with municipalities and contractors, so any real data theft could reach well beyond the company itself. Partner municipalities and contractors should watch for SALEG-themed phishing and invoice fraud. Unverified threat-actor claim, NOT confirmation of a breach.

Extracted Entities

Attack Types (1)

Companies (1)

Ransomware Groups (1)