Skip to content
Leak-site post naming halservice.it, captured by ThreatCluster

halservice.it

safepay

Ransomware leak-site victim intelligence · IT

Views
6,306
Posted
Oct 5, 2026
Country
IT
Industry
Telecommunications and ICT

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

Safepay claims to have exfiltrated data from HAL Service S.p.A. and published it on its leak site; the post does not specify the quantity. The leak describes the material as HR and recruitment records, internal documentation and source code. HAL Service S.p.A. is identified as the victim, described as a telecommunications and ICT firm headquartered in Borgosesia, Piedmont, Italy (domain halservice.it). The leak post is published, with a posted date of 2026-10-05.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Founded
1990
Domains
halservice.it

What was taken

Established in 1990, the company initially focused on system integration and information-technology services and later expanded into telecommunications following the …

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture