safepay ransomware group lists reger-zahntechnik.de on its leak site

• Ransomware group: safepay
• Country: Germany
• Sector: Professional Services
• Announcement date: December 19, 2025

German dental laboratory targeted by safepay ransomware group

The German-based dental laboratory reger-zahntechnik.de has been listed on the leak site of the safepay ransomware group. The threat actor group claims to have successfully accessed the systems of the institution and is currently threatening to publish the stolen data.

Details of the claimed attack

According to the announcement made on December 19, 2025, the threat actor known as safepay added reger-zahntechnik.de to its dedicated leak site. The group asserts that they have gained unauthorized access to the organization's internal systems. This group is recognized as an entity that emerged in late 2024 and is known for employing a double-extortion strategy.

Double extortion is a common tactic used by modern ransomware groups. In this method, attackers do not just encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data before the encryption process begins. The attackers then threaten to leak this stolen information on public forums or specialized leak sites if the ransom is not paid. This approach increases the pressure on the victim, as the threat of a public data breach can cause significant reputational and legal damage, even if the organization has backups to restore its systems.

It is worth noting that the safepay group does not appear to use an affiliate program, which suggests that these types of attacks may be managed and executed directly by the group members themselves rather than through third-party contractors.

Information regarding the alleged data breach

Regarding the specific contents of the breach, the announcement provided no specific details regarding the type of data allegedly leaked. The screenshot associated with the listing contains only general information regarding the institution's field of activity.

• No specific data types were identified in the announcement.

About Reger Zahntechnik

Reger Zahntechnik, formally known as Walter Reger Zahntechnisches Labor GmbH, is a traditional dental laboratory located in Nuremberg, Germany. The company specializes in the production of dental prosthetics and provides various other dental solutions to its clients.

Potential impact and organizational risks

The nature of the target organization presents specific risks following this claim. Given that the institution operates as a dental laboratory, there is a possibility that the leaked data could include sensitive patient health records or personal information. Such a scenario could lead to significant legal sanctions under the European Union's General Data Protection Regulation (GDPR), which mandates strict protections for personal and health-related data.

Beyond the legal implications, the use of the double-extortion method by safepay introduces several operational and reputational risks:

• Data Publication: There is a persistent risk that the institution's data may be published on the dark web or sold to other malicious actors.
• Operational Disruption: A successful attack can disrupt the institution's daily operational processes, hindering its ability to serve clients.
• Loss of Trust: A public data leak can lead to a significant loss of trust among customers and professional partners.

For organizations operating in the professional services and healthcare-adjacent sectors, maintaining robust cybersecurity defenses is essential. Common defensive steps include implementing multi-factor authentication, maintaining offline backups, and conducting regular security audits to identify vulnerabilities before they can be exploited by ransomware groups.