safepay ransomware group lists inttrust.gr on its leak site

• Ransomware group: safepay
• Country: Greece
• Sector: Technology
• Announcement date: December 14, 2025

Safepay claims compromise of InTTrust S.A.

The threat actor known as safepay has listed the Greek organization inttrust.gr on its dedicated leak site. The announcement, which appeared on December 14, 2025, indicates that the group claims to have successfully compromised the entity's data. This listing follows the group's established pattern of naming victims to exert pressure through public exposure.

The claim was made alongside an announcement regarding the incident. While the group has officially added the organization to its list of victims, the specific details regarding the nature of the alleged compromise remain limited to the group's initial notification. This type of public listing is a common tactic used by ransomware groups to signal a successful intrusion and to initiate the extortion phase of an attack.

Details of the alleged data breach

Regarding the specifics of the incident, the announcement provided by the safepay group contains general information regarding the company's digital services and its consulting operations. However, the group has not provided specific details or samples regarding the nature of the allegedly compromised data. There is no information available concerning the volume of files involved or the specific types of data that were targeted during the incident.

The listing names no specific data types or categories of information that have been allegedly exfiltrated.

About InTTrust S.A.

InTTrust is a Greek information technology and consulting firm that has been operating since its founding in 2006. Headquartered in Athens, the company specializes in providing a variety of digital solutions to enterprise clients. Their service portfolio includes digital transformation, cloud computing, and various IT infrastructure solutions designed to support modern business operations.

Risk assessment and industry implications

This incident suggests that the organization's operational processes and client data may be at risk. Because the safepay group is known to employ double extortion tactics, there is a possibility that the exfiltrated data could be published or sold. Double extortion is a method where attackers not only encrypt a victim's data but also steal sensitive information, threatening to leak it publicly unless a ransom is paid. This approach increases the pressure on organizations by targeting their reputation and regulatory compliance.

As the organization is based in Greece, any potential data breach may lead to legal consequences under the GDPR (EU General Data Protection Regulation). The regulatory framework in the European Union imposes strict requirements on how personal data must be protected and how breaches must be reported. Failure to secure sensitive information can result in significant legal and financial penalties.

Furthermore, the company's position in the technology and consulting sector may create secondary risks. Organizations that provide IT infrastructure and digital transformation services are often integrated into the environments of their clients, which can lead to risks such as supply chain attacks and targeted phishing campaigns. When a service provider is compromised, it can serve as a gateway to reach their broader client base.

In such scenarios, organizations within the technology sector can take various defensive steps to mitigate risks. Implementing robust identity and access management, maintaining strict network segmentation, and ensuring comprehensive logging and monitoring are standard practices to detect and prevent unauthorized movement within a network. Additionally, regular security assessments and adherence to strict data protection protocols are essential for maintaining the integrity of the digital supply chain.

Public information regarding the safepay group remains limited, making it difficult to determine the full scope of their operations or their specific technical methodologies.