Safepay ransomware group lists holtzofficesupport.com on its leak site

• Ransomware group: Safepay
• Country: Germany
• Sector: Professional Services
• Announcement date: October 31, 2025

Safepay ransomware group lists Holtz Office Support GmbH

The Safepay ransomware group has listed the Germany-based company Holtz Office Support GmbH on its leak site. According to an announcement published on October 31, 2025, the threat actor claims to have targeted the domain holtzofficesupport.com. This development follows an alleged attack date of October 18, 2025.

Details of the alleged attack

The threat actor known as Safepay claims to have targeted holtzofficesupport.com in an announcement published on October 31, 2025. The group alleges that it has gained access to the organization's systems and exfiltrated data. The post includes operational and financial details of the company, continuing the threat of data leakage as part of a double-extortion scheme.

Double-extortion is a common tactic used by modern ransomware groups. In this method, attackers do not merely encrypt a victim's files to disrupt operations; they also steal sensitive information before the encryption process begins. The attackers then threaten to leak this stolen data on public forums or leak sites if the ransom is not paid. This adds significant pressure on the victim, as the threat of a data breach can lead to regulatory penalties and loss of client trust, regardless of whether the company can restore its systems from backups.

Information regarding the allegedly exfiltrated data

No specific information regarding the nature of the allegedly exfiltrated data has been provided. The screenshot contains general company profile information and publicly available financial data.

Potential risks and implications

Given the double-extortion tactics employed by the Safepay group, there may be a risk of employee and customer data being exposed. As the company is based in Germany, the incident may lead to legal and administrative consequences under the GDPR (EU General Data Protection Regulation). Negative impacts on the organization's commercial reputation may occur, and leaked data could potentially be utilized for secondary attacks.

Public information regarding this group, which emerged in late 2024, is limited; however, similar ransomware cases suggest that the organization's operational continuity may be disrupted. When organizations face such threats, common defensive steps often include implementing multi-factor authentication, maintaining offline backups, and conducting regular security awareness training for employees to prevent initial access via phishing.

Organization profile

Founded in 1956, Holtz Office Support GmbH is a family-owned, medium-sized German company headquartered in Wiesbaden. The company specializes in office support services and solutions.