safepay ransomware group lists barnet.com.au on its leak site

• Ransomware group: safepay
• Country: Australia
• Sector: Professional Services
• Announcement date: December 5, 2025

The Australian-based communications management organization BarNet has been listed on the leak site of the safepay ransomware group. In an announcement published on December 5, 2025, the threat actor group claimed to have targeted the organization and asserted that they have compromised its data.

The claim by safepay

The ransomware group known as safepay announced that it has targeted BarNet in a post published on December 5, 2025. According to the group's claim, they have successfully compromised the organization's data and subsequently listed the entity on their dedicated leak site. At this stage, the announcement provided by the group contains only general information regarding the operations and services of the organization.

Ransomware leak sites serve as a platform for cybercriminals to exert pressure on their victims. These sites are used to host information about targeted organizations, often as a means of publicizing a successful breach to increase the likelihood of a ransom payment. Such tactics are a common component of modern cyber extortion campaigns.

Details regarding the alleged data breach

Regarding the specific contents of the breach, there is no specific information available concerning the nature of the leaked or compromised data in the announcement. The screenshot provided by the group contains only general descriptive information about the organization's business operations.

The listing names no specific data types that have been compromised.

Risk assessment and industry implications

This incident may pose a risk to the operational security of an organization serving legal professionals. Given that the safepay group is known to employ double-extortion tactics, there may be a potential for the publication of sensitive data. Double extortion is a technique where attackers not only encrypt an organization's data but also steal it, threatening to leak the sensitive information publicly if the ransom is not paid. This adds a layer of pressure beyond simple service disruption.

Under Australian data protection regulations, a potential data breach could trigger legal notification requirements. Furthermore, due to the nature of data within the legal sector, this situation could lead to secondary threats regarding client confidentiality and third-party risks. The sensitive nature of legal documentation means that any compromise can have cascading effects on the privacy of various stakeholders.

The fact that the group emerged in late 2024 may suggest that their operations could still be in an evolving phase. As threat actors refine their methods, organizations often implement defensive steps such as implementing robust backup strategies, enforcing multi-factor authentication, and maintaining strict network segmentation to mitigate the impact of such attacks.

Organization profile

BarNet is an Australian specialist communications management and technology services organisation focused on serving legal professionals, particularly barristers and legal chambers.