safepay ransomware group lists companionsandhomemakers.com on its leak site

• Ransomware group: safepay
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: August 29, 2025

Companions & Homemakers targeted by safepay ransomware group

The Connecticut-based home care service provider Companions & Homemakers has been listed on the leak site of the ransomware group known as safepay. According to an announcement published on August 29, 2025, the group claims to have gained access to the organization's operational data.

Details of the claimed attack

The ransomware group safepay added Companions & Homemakers to its leak site in an announcement released in late August 2025. While the group has posted the organization's name, the announcement includes general information regarding the company's operations and its position within the sector. The group's claim suggests they have successfully breached the organization's systems to access operational information.

Ransomware leak sites are platforms used by cybercriminal groups to pressure victims into paying ransoms by threatening to publish sensitive data. This often involves a tactic known as double extortion, where attackers not only encrypt an organization's files to disrupt operations but also steal sensitive information to threaten its public release. This method increases the pressure on victims, as the threat of data exposure can cause significant reputational and legal damage even if the organization can restore its systems from backups.

Data involved in the incident

The listing does not provide specific information regarding the nature of the alleged leaked data. No specific data types, file counts, or data sizes were provided in the announcement.

About Companions & Homemakers

Companions & Homemakers is a home care service provider based in Connecticut. With over 30 years of experience, the organization offers home care and companionship services specifically designed for the elderly and those in need. The company focuses on supporting individuals to live independently in their own homes.

Potential impact and industry implications

Given that the organization operates in the home-care and health services sector, a potential data breach may lead to the exposure of sensitive personal information. This could result in legal repercussions under HIPAA regulations in the United States and significant reputational damage for the organization. The use of double extortion tactics by the safepay group may increase the risk of the leaked data being utilized in secondary attacks or identity theft attempts.

Furthermore, employees and service recipients may become more vulnerable to targeted phishing attacks following such an incident. Organizations in the healthcare and home-care sectors are often targeted due to the high value of sensitive personal and medical information. To defend against such threats, organizations typically implement multi-factor authentication, maintain regular offline backups, and conduct continuous monitoring of their networks to detect unauthorized access early.

The safepay group, which emerged in late 2024 and operates independently, appears to be driven by financial gain. The targeting of service providers in the care industry highlights the ongoing risk that specialized service organizations face from independent ransomware actors seeking to exploit sensitive data for profit.