safepay ransomware group lists soavegel.it on its leak site

• Ransomware group: safepay
• Country: Italy
• Sector: Agriculture and Food Production
• Announcement date: May 6, 2026

The Italian food manufacturing company soavegel.it has been listed on the leak site of the safepay ransomware group. This announcement, published on May 6, 2026, indicates that the organization has become a target of a cyberattack involving claims regarding its digital assets.

The claimed attack and group tactics

The safepay group published an announcement on its leak site on May 6, 2026, listing soavegel.it as a victim. According to the group's claims, the organization's digital assets are being targeted. The group appears to be applying pressure through a double-extortion strategy. In such scenarios, threat actors typically steal sensitive data before encrypting systems, using the threat of leaking that data to coerce the victim into paying a ransom.

The use of double extortion is a common tactic in modern ransomware campaigns. By threatening to release confidential information publicly, attackers aim to maximize their leverage over the victim. This method shifts the pressure from mere operational disruption to potential reputational and legal crises. While the safepay group has been active since its emergence in late 2024, public information regarding the group's specific methods and infrastructure remains limited.

Data involved in the listing

The nature and scope of the data allegedly leaked are not specified in the provided screenshot or registration records. The listing does not provide details regarding the volume of files or the specific types of information that have been targeted by the attackers.

• No specific data types were identified in the listing.

About soavegel

Soavegel is an Italian food manufacturing company founded in 1935. The organization specializes in frozen gastronomic products, focusing on the production and distribution of various frozen food items within the food production sector.

Implications and sectoral risks

This incident may have negative implications for the institution's operational continuity and commercial reputation. As an Italy-based company, any potential data breach could lead to legal consequences under the European Union's General Data Protection Regulation (GDPR). The use of double-extortion by the safepay group may increase the risk of employee or customer data exposure, which could potentially lead to secondary attacks or identity theft.

Furthermore, the institution's supply chain processes in the food production sector may be adversely affected by such a cyber incident. Disruptions in the digital infrastructure of food manufacturers can ripple through the supply chain, affecting distribution and logistics. To mitigate such risks, organizations in this sector often focus on robust backup strategies, network segmentation, and continuous monitoring of their digital environments to detect unauthorized access before data exfiltration occurs.