Skip to content
Leak-site post naming cromados.com, captured by ThreatCluster

cromados.com

safepay

Ransomware leak-site victim intelligence · ES

Views
10,721
Posted
Sep 28, 2026
Country
Spain
Industry
Metal finishing and coatings; manufacturing and commercialization

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The safepay group claims Cromados Modernos S.L. (cromados.com) is the victim and that data has been exfiltrated; the leak post was published on 2026-09-28 and is listed on the leak site. The leak page describes the victim’s business activities and shows a screenshot capture; it does not specify the data types or volume involved. Victim details identify Cromados Modernos S.L. as a Spanish manufacturing company based in Cardeñadijo, Burgos.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
cromados.com

What was taken

The company's registered business activities include thermal treatment of metals, organic and electrolytic coatings, and the manufacture and commercialization of …

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

The link will be added soon.
The link will be added soon.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture