Hiqbio.com listed on safepay ransomware leak site

• Ransomware group: safepay
• Country: United States
• Sector: Healthcare
• Announcement date: October 12, 2026

The safepay ransomware group has listed the domain hiqbio.com on its dedicated leak site, alleging that the organization has been the target of a data breach. This announcement, made on October 12, 2026, suggests that the threat actor group has carried out an action against the systems of the biotechnology firm.

The claimed attack and method

According to the announcement published by the safepay group, the attack is claimed to have taken place on October 2, 2026. While the group has publicly listed the organization on its platform, the specific details regarding the nature of the intrusion remain unconfirmed. However, the listing suggests that the group employs a double-extortion strategy. In such scenarios, threat actors typically do not just encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data from the victim's network. The goal of this method is to pressure the organization into paying a ransom by threatening to release the stolen information on a public leak site, which can cause significant reputational and regulatory damage.

Data involved in the claim

Regarding the specific contents of the alleged breach, the announcement provides no specific information regarding the nature of the leaked data. The provided documentation contains only general information about the company's areas of activity rather than details on the stolen files. The listing names no specific data types.

About hiqbio.com

HiQ Bio is a biotechnology company that focuses on applying marine biotechnology to human health, animal health, functional foods, and sustainable aquaculture. Based in the United States, the company operates within the highly regulated healthcare and biotechnology sectors.

Analysis and potential implications

The use of the double-extortion method by the safepay group indicates that the organization may face the risk of sensitive data being published. Given the company's operations in the healthcare and biotechnology sector, the breach could potentially have negative impacts on intellectual property and trade secrets. The specialized nature of marine biotechnology means that proprietary research and development data is often a primary target for sophisticated threat actors.

As a US-based entity, a potential data breach may lead to legal processes under sectoral regulations such as HIPAA and state-level data protection laws. These regulatory frameworks impose strict requirements on how sensitive information must be protected and how breaches must be reported to authorities and affected individuals. Furthermore, depending on the content of the leaked data, secondary risks such as identity theft and targeted phishing attacks against employees or customers may emerge. Such attacks often follow a breach, as criminals use the stolen information to craft highly convincing social engineering campaigns.

Public information about the safepay group remains limited, making it difficult to attribute the attack to a specific known threat actor profile or to predict their future patterns. For organizations in the biotechnology and healthcare sectors, maintaining robust defensive postures is critical. This includes implementing strict access controls, continuous monitoring of network traffic for unauthorized data exfiltration, and ensuring that all sensitive research data is encrypted both at rest and in transit. Additionally, regular employee training on phishing awareness can help mitigate the risk of initial access through social engineering.