Safepay lists mytaac.com on leak site

• Ransomware group: Safepay
• Country: United States
• Sector: Technology
• Announcement date: June 7, 2025

Safepay claims data breach against mytaac.com

The ransomware group known as Safepay has listed the technology company mytaac.com on its dedicated leak site. According to the announcement made by the threat actor, the group claims to have successfully exfiltrated a significant amount of data belonging to the organization. This development follows a pattern of activity observed in recent ransomware campaigns where groups target specific entities to exert pressure through public exposure.

The event was officially announced on the group's leak site on June 7, 2025. In the listing, the Safepay group asserts that they have obtained 45 GB of data from the target. Furthermore, the group has made claims regarding the financial standing of the organization, stating that mytaac.com generates $4.8 million in revenue. This specific detail is often used by ransomware groups to increase the pressure on a victim to meet their demands.

Details of the claimed data theft

While the group has provided specific metrics regarding the scale of the breach, the actual contents of the stolen information remain unclear. The group has provided a screenshot as part of their announcement, which confirms the volume of the data involved. However, the listing does not provide specific details regarding the nature or the specific types of data that were allegedly compromised during the attack.

Regarding the specific categories of information involved, the listing names no data types.

Analysis of the threat actor's tactics

The Safepay group appears to be utilizing double-extortion tactics in this instance. Double extortion is a common ransomware strategy where attackers not only encrypt an organization's systems but also steal sensitive data before the encryption process begins. The goal is to threaten the victim with the public release of this data on a leak site if the ransom is not paid, thereby creating a secondary layer of leverage beyond simple operational disruption.

Organization profile

MyTAAC is a technology company that provides custom software solutions, data management, and business process optimization for the automotive industry. It specializes in developing digital tools for automotive supply chain and logistics processes.

Implications and industry risks

The listing of mytaac.com by Safepay suggests that the security of the organization's digital assets may have been compromised. Because the organization is based in the United States, this incident may lead to legal consequences under state-level data privacy laws and relevant regulatory bodies. The potential exposure of data can trigger complex compliance requirements and investigations by various authorities.

Beyond the immediate legal and regulatory concerns, secondary risks may emerge for the organization. These include the possibility of identity theft or targeted phishing attacks directed at the employees and customers of the company. When sensitive information is leaked, attackers often use it to craft highly convincing social engineering campaigns to further exploit the organization or its partners.

The emergence of the Safepay group in late 2024 suggests that their operational methods may not yet be fully analyzed by the broader cybersecurity community. This highlights the importance for organizations to adopt proactive measures. Companies in the technology and automotive supply chain sectors should focus on robust data protection strategies, such as implementing zero-trust architectures, maintaining strict access controls, and ensuring comprehensive monitoring of data egress to detect unauthorized transfers before they reach a significant scale.