Skip to content
Leak-site post naming gob.pe, captured by ThreatCluster

gob.pe

safepay

Ransomware leak-site victim intelligence

Views
14,253
Posted
Sep 15, 2026
Country
PE
Industry
Government

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Safepay claims it has exfiltrated gob.pe data, the Peruvian government’s official unified digital platform, across multiple data categories including government information, administrative procedures, digital services, regulations, publications, campaigns, institutional news, identification-related procedures, tax information, healthcare information, certificates, permits and public-sector recruitment information. The leak post describes gob.pe as the official unified digital platform of the Government of Peru, administered by the Presidencia del Consejo de Ministros through the Secretariat of Government and Digital Transformation. The leak post is published (2026-09-15); ThreatCluster captured a screenshot, and the page shows 738 views.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

It serves as the country's primary online point of contact between public institutions and citizens, providing government information, administrative procedures, …

Data categories
government informationadministrative proceduresdigital servicesregulationspublicationscampaignsinstitutional newsidentification-related procedurestax informationhealthcare informationcertificatespermitspublic-sector recruitment information

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture