CISA: SafePay ransomware hit over 600 critical infrastructure orgs

The Cybersecurity and Infrastructure Security Agency (CISA), alongside the FBI, has issued an advisory warning that the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024. SafePay is an emerging ransomware threat targeting critical infrastructure sectors globally. The scale of the campaign—600+ victims—highlights the group's aggressive and widespread operational tempo. CISA's involvement underscores the severity and national security implications of the threat. The advisory likely includes indicators of compromise and mitigation guidance for affected organizations. Critical infrastructure sectors such as energy, healthcare, and transportation are typically primary targets for ransomware groups of this nature. Organizations are urged to review CISA's advisory and implement recommended defenses promptly.