Skip to content
Leak-site post naming grifosespinoza.com, captured by ThreatCluster

grifosespinoza.com

safepay

Ransomware leak-site victim intelligence

Views
2,282
Posted
Oct 31, 2026
Country
PE
Industry
Oil & gas

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

The leak post claims Grifos Espinoza S.A. (grifosespinoza.com), an oil and gas company headquartered in Lima, Peru, as the victim. The group safepay published the leak on 2026-10-26 and states the company operates fuel stations serving motorists, commercial customers and other transportation-related businesses. The material does not specify what data were taken or the quantity.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Headquartered in Lima, the company manages fuel stations that serve individual motorists, commercial customers and other transportation-related businesses. Its core …

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture