safepay ransomware group lists sbws.org.sg on its leak site

• Ransomware group: safepay
• Country: Singapore
• Sector: Professional Services
• Announcement date: December 14, 2025

Safepay claims data breach at Singapore Buddhist Welfare Services

The threat actor known as safepay has published an announcement on its leak site claiming that data belonging to sbws.org.sg has been compromised. This listing, which appeared on December 14, 2025, identifies Singapore Buddhist Welfare Services (SBWS) as a target of the group's operations. While the announcement serves as a claim of a successful intrusion, the specific details regarding the breach remain limited to the group's public posting.

Details of the claim

According to the announcement posted by the threat actor, the breach is linked to an attack that allegedly took place on November 28, 2025. The safepay group, which emerged in late 2024, is known for employing a double-extortion strategy. In such attacks, threat actors not only encrypt an organization's systems to disrupt operations but also exfiltrate sensitive data, threatening to leak it on a public forum if a ransom is not paid. This dual-layered approach increases the pressure on victims by threatening their reputation and regulatory standing.

The group's operational model appears to be centralized, as there is no indication that safepay operates an affiliate program. This suggests that the attacks attributed to this group may be managed directly by the core members of the threat actor collective rather than through a distributed network of independent operators.

Information regarding compromised data

Regarding the content of the alleged breach, the announcement provides no specific details regarding the nature of the compromised data. The listing contains only general information about the organization's operations and a screenshot featuring the organization's descriptive text. The listing names no specific data types that have been stolen or accessed.

About Singapore Buddhist Welfare Services

Singapore Buddhist Welfare Services (SBWS) is a well-established voluntary welfare organization based in Singapore. The organization focuses on providing holistic support to the community through elderly care and various social welfare programs. It provides community-based social support services to those in need within the region.

Analysis and potential implications

Given the organization's focus on social welfare and healthcare services, a potential data breach could expose sensitive personal information. The nature of the services provided by SBWS suggests that the data handled by the organization is likely highly personal, which increases the risk to the individuals receiving services if the data is published or sold. Such an event could lead to risks of identity theft for the affected individuals.

From a regulatory perspective, the organization may face legal obligations under Singapore's Personal Data Protection Act (PDPA) due to the potential exposure of personal data. Furthermore, because the organization maintains collaborations with government agencies, such an incident could imply potential risks regarding supply chain security within the broader social service network.

For organizations operating in the social welfare and healthcare sectors, maintaining robust cybersecurity postures is essential to protect vulnerable populations. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for staff. Because double-extortion attacks target the confidentiality of data, organizations should prioritize data loss prevention strategies and encryption for sensitive information at rest and in transit to mitigate the impact of potential exfiltration.