Skip to content
Leak site of unsafe, captured by ThreatCluster

unsafe

Active

12 tracked victims · First seen Dec 21, 2022 · Last seen Aug 28, 2026

About

Written by ThreatCluster from 2 stories

Unsafe operates as a ransomware group that uses an extortion model—breaching organizations and leaking data—and employs tradecraft such as publishing screenshots and other material on a dark web leak site to pressure payment. The group has claimed 12 victims across Technology, Manufacturing, Government, Healthcare, and Professional Services sectors, with victims in the United States, Germany, India, Brazil, and Canada. A pattern in recent reporting shows the group publicizing victims and data via a dark web leak site; for example, Deutsche Bank reported a breach and leaked employee data after Unsafe claimed access and published screenshots of database extracts. Overall, the reporting points to a multi-sector, multinational footprint and ongoing use of data-exfiltration and leak-site tactics.

Sectors: Technology, Manufacturing, Government · Countries: US, DE, IN

Recent victims

View all →
VictimSectorCountryDataFilesViewsPostedStatus
watchops.com
watchops.com
TechnologyUS338Sep 12, 2026countdown
amzur.com
amzur.com
Not FoundBR915,518Aug 28, 2026countdown
Presentations.AI
presentations.ai
TechnologyUS1230,558Aug 10, 2026countdown
DECK APP TECHNOLOGIES PTE. LTDTechnologyINAug 10, 2026listed
Constellation HomeBuilder Systems
c3ljidzt2opf4xzh5crgojivi2ekkt6fapfpyqclpj4bfwdtoexucdid.onion
ManufacturingUS3926,488Aug 9, 2026countdown
Jiva Health
jivahealth.com
HealthcareINover 3 TB of personal data and patient medical records.3233,816Jul 25, 2026countdown
CCR Solutions
ccrsolutions.com
Professional ServicesCanada1.5Tb+1926,300Jul 20, 2026countdown
Deutsche BankFinancial ServicesDE343,152Jul 4, 2026countdown
straightperformance.deBusiness ServicesDEJun 28, 2026listed
SPARTAN Light Metal ProductsManufacturingUSJan 14, 2024
Hartl European Transport CompanyTransportation/LogisticsCHJan 14, 2024
American International CollegeGovernmentUSJan 14, 2024

Found by ThreatCluster

9 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

https://straightperformance.de/
straightperformance.de · 16 files
Aug 29, 2026
Invenergy
invenergy.com · Power generation and operations · about 8Tb · 2 files
Aug 29, 2026

All ransomware groups · Dark web intelligence