GrayscaleInsight
Subscriber-only

Cyber Threat Intelligence — subscriber access

The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.

View pricing Log in
Ransomware Disclosed · 2 May 2026 Actor · SAFEPAY

Energy Action falls victim to SAFEPAY Ransomware

Disclosed
2 May 2026 · 04:06:36 UTC
Source channel
tor
Category (raw)
Ransomware
Category (norm)
ransomware
Victim
Country
Australia
Industry
Energy & Utilities
Organization
energy action
Site
energyaction.com.au

Original content

The group claims to have obtained the organization's data. The group intends to publish the data within 2–3 days.

Source disclosure
http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/energyactioncomau/
View original

Screenshots (1)

Threat intelligence screenshot 1 — Ransomware