Skip to content
Leak-site post naming mcnishsteel.com, captured by ThreatCluster

mcnishsteel.com

safepay

Ransomware leak-site victim intelligence · EN

Views
4,408
Posted
Sep 8, 2026
Country
CA
Industry
construction industry

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The safepay group’s leak claims data related to McNish Steel Ltd. (domain: mcnishsteel.com), a Canadian construction company headquartered in Edmonton, Alberta. The leak page lists victim-profile details, including legal name, domain, sector, country and headquarters, and names William McNish and Wallace McNish. An onion link is provided to access the material: http://a5d3otrzcgbprssbut7fm7ykl2edbcrhzxi3g3qhs327jwp44yovi2id.onion/mcnishsteel/, and the leak post is published (posted 2026-09-08) with 4,408 views.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Founded
1978
Domains
mcnishsteel.com
Platforms
engineering software
People named
William McNish Wallace McNish

What was taken

The company is headquartered in Edmonton, Alberta, and was founded in 1978 by William and Wallace McNish. It has developed …

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

onion_link
http://a5d3otrzcgbprssbut7fm7ykl2edbcrhzxi3g3qhs327jwp44yovi2id.onion/mcnishsteel/

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture