Skip to content
Leak-site post naming ryomo.co.jp, captured by ThreatCluster

ryomo.co.jp

safepay

Ransomware leak-site victim intelligence · JA

Views
14,181
Posted
Sep 15, 2026
Country
JP
Industry
Information Technology

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

Safepay claims to have exfiltrated data from Ryomo Systems Co., Ltd. (ryomo.co.jp); the leak post does not specify what data was taken or the total volume. The leak post is published on 2026-09-15. The leak page provides a victim profile for Ryomo Systems Co., Ltd., domain ryomo.co.jp, Japan, with headquarters in Kiryu, Gunma Prefecture.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Founded
1970

What was taken

Established in January 1970 as a regional computer-services center, the company has developed into a publicly listed systems integrator providing …

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture