safepay ransomware group lists new-point.it on its leak site

• Ransomware group: safepay
• Country: Italy
• Sector: Technology
• Announcement date: August 3, 2026

Safepay group claims ransomware attack against new-point.it

The safepay ransomware group has listed the Italian-based technology provider new-point.it on its dedicated leak site. According to the announcement made on August 3, 2026, the group claims to have targeted the organization in a ransomware attack. This listing serves as a public notification from the threat actors, signaling that the target has been compromised.

The group's announcement indicates that they are employing a double-extortion tactic. In such scenarios, cybercriminals do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive information. The threat actors then use the threat of publishing this stolen data on their leak site to pressure the victim into paying a ransom. This method increases the pressure on the target, as the exposure of data can lead to significant reputational and legal consequences.

Details regarding the claimed data breach

While the safepay group has officially listed the domain new-point.it, the specific details regarding the stolen information remain limited. The announcement provides a general overview of the company's operations and business model, which the group uses to demonstrate their access to the internal environment.

Regarding the specific contents of the alleged breach, the listing names no data types. There is currently no information available concerning the specific types of data that were allegedly exfiltrated, nor is there any information regarding the total size of the data or the number of files involved. Furthermore, the group has not issued a specific ransom demand in the public announcement.

About new-point.it

New Point is an established technology supplier with a significant presence in the Italian market. Founded in 2006, the company is based in Signa, Florence, Italy. The organization operates extensively within the field of IT and technology solutions, providing various services to its clients.

Potential impacts and industry implications

The use of double-extortion tactics by groups like safepay presents a multifaceted risk to organizations. For a company like New Point, which provides e-commerce and B2B services, the potential exposure of sensitive data could have far-reaching consequences. There is a possibility that customer and business partner data may be at risk, which could lead to negative impacts across the company's supply chain. Such breaches often pave the way for secondary attacks, such as identity theft or highly targeted phishing campaigns directed at the organization's clients and partners.

Furthermore, because the company is based in Italy, any confirmed data breach could trigger legal scrutiny and potential sanctions under the European Union's General Data Protection Regulation (GDPR). The regulatory landscape in the EU places heavy emphasis on the protection of personal data, and failures in data security can result in significant legal and financial liabilities.

In the technology and IT solutions sector, maintaining robust security postures is critical. Organizations typically focus on defensive strategies such as implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent security audits to mitigate these risks. As threat actors continue to refine their extortion methods, the necessity for comprehensive data protection and incident response planning becomes increasingly vital for maintaining trust within the digital supply chain.