Safepay ransomware group lists adesursas.com on its leak site

• Ransomware group: Safepay
• Country: Colombia
• Sector: Agriculture and Food Production
• Announcement date: November 18, 2025

Safepay claims attack on Adesur SAS

The Safepay ransomware group has officially listed the Colombia-based organization Adesur SAS on its dedicated leak site. According to the announcement made on November 18, 2025, the threat actor group claims to have successfully gained access to the digital assets belonging to the company. This listing serves as a public notification by the group, creating a victim profile that details the organization's general commercial activities and operational structure.

The incident was announced on the same day the group claims the attack occurred. While the presence of a profile on a leak site is a common tactic used by ransomware operators to pressure victims, the specific details regarding the breach remain limited to the information provided by the threat actor. The group has established a presence for the victim on their platform, which is a standard procedure for groups utilizing extortion-based business models.

Details regarding the alleged data breach

Regarding the specific contents of the alleged breach, the current information is highly limited. There is no specific information regarding the type or content of the data allegedly leaked in either the provided records or the associated documentation. The listing does not specify the volume of data involved or the exact nature of the files accessed by the attackers.

The listing names no data types.

Implications of the double-extortion model

The Safepay group is known to operate using a double-extortion model. In such scenarios, threat actors do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information prior to encryption. The goal of this secondary layer of extortion is to threaten the victim with the public release of their data if a ransom is not paid. This tactic significantly increases the pressure on the targeted organization, as the threat of a data leak can cause long-term reputational and legal damage even if the organization can restore its systems from backups.

Organization profile: Adesur SAS

Adesur SAS is a company based in the city of Pasto, located in the Nariño region of Colombia. The organization operates within the agricultural and food production sector, specifically focusing on the wholesale distribution of agricultural and veterinary products. Their operational structure involves managing the supply chain for these essential goods within their regional market.

Risk assessment and industry considerations

Given the nature of the claim, there is a potential risk that the organization's sensitive commercial and operational data has been compromised. For companies operating in the agricultural and wholesale distribution sectors, such a breach can lead to a significant loss of trust among supply chain partners and customers. Maintaining the integrity of commercial data is vital for the continuity of wholesale operations.

Furthermore, the organization may face legal obligations under the data protection regulations in Colombia. Beyond legal compliance, there is an assessment that any leaked data could potentially be utilized by malicious actors for identity theft or targeted phishing attacks against the company or its partners. Publicly available information regarding the Safepay group remains limited, making it difficult to determine the full scope of their typical operations.

Organizations in similar sectors can mitigate these risks by implementing robust security frameworks. Common defensive steps include maintaining offline, immutable backups to protect against encryption, implementing strict access controls to limit lateral movement, and conducting regular monitoring of network traffic to detect unauthorized data exfiltration. Additionally, educating employees on phishing awareness is a critical component in defending against the secondary stages of a ransomware attack.