Skip to content
Ransomware

Lcpublishinggroup.com listed on Safepay ransomware leak site

Italy-based digital publishing company LC Publishing Group has been listed on the leak site of the Safepay ransomware group.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Safepay
  • Country: Italy
  • Sector: Professional Services
  • Announcement date: January 24, 2026

Safepay claims a data breach against lcpublishinggroup.com

The threat actor known as Safepay has officially listed lcpublishinggroup.com on its dedicated leak platform. This announcement, made on January 24, 2026, indicates that the organization has been targeted in a cyberattack. The group is currently employing a double-extortion tactic, a method where attackers not only encrypt an organization's systems but also threaten to publish sensitive information on a public leak site to increase pressure on the victim.

In such double-extortion scenarios, the threat actor leverages the fear of reputational damage and regulatory scrutiny to demand ransom payments. By hosting the organization's name on a public platform, the group aims to demonstrate its capability and create public pressure. While the listing is a claim made by the ransomware group, it highlights the ongoing risks faced by digital service providers in the current threat landscape.

Details regarding the claimed incident

According to the announcement posted by Safepay, the listing includes general information regarding the digital publishing operations of the targeted entity. However, the threat actor has not provided specific details regarding the nature of the data allegedly exfiltrated during the attack. The announcement remains vague concerning the specific files or databases that have been compromised.

The listing names no specific data types that have been allegedly stolen from the organization.

Organizational profile

LC Publishing Group is an international digital publishing and information services company. Founded in 2011 and headquartered in Milan, the firm specializes in producing professional content and analysis tailored for the legal and business sectors. Its operations are centered around providing high-quality information services to a global professional audience.

Analysis and potential implications

The use of double-extortion tactics by groups like Safepay presents significant risks to organizations. For an entity like LC Publishing Group, which manages professional networks and hosts industry events, a data breach could result in secondary risks for its partners and event participants. Such an incident poses a threat to the company's commercial reputation and may create opportunities for attackers to launch targeted phishing attacks against the organization or its stakeholders.

Furthermore, because the organization is based in Italy, any confirmed data breach could lead to serious regulatory consequences under the European Union's General Data Protection Regulation (GDPR). The legal implications of mishandling sensitive professional or personal data under GDPR frameworks are substantial for any European-based entity.

In the professional services and digital publishing sectors, organizations often face various challenges when defending against ransomware. General defensive strategies typically involve maintaining robust backup systems, implementing strict access controls, and conducting regular employee training to recognize social engineering attempts. As information regarding the Safepay group remains limited, organizations are advised to remain vigilant against the potential for data exposure and subsequent ransom demands.

From the Essential plan

Third-Party Risk

Monitor leaks on your suppliers’ domains and identify at-risk suppliers at an early stage.

Related stories