deom.be

This record is a provider-reported ransomware claim attributed to safepay. It is an allegation and has not been independently confirmed.

Claim context

Provider-reported sector
Not Found
Provider-reported country
Belgium
Group-published claim date
First tracked
Last observed
Monitoring providers
6
Independent monitoring providers
5
Website
deom.be
Post URL
https://cybercrime.works/leaks/9143abeb-885f-4b39-814e-d1ca071cff9f
Data source
unified
Duplicate records merged
5

Provider observation timeline

Newest observations first. Provider observations are not independent confirmation of an incident.

  1. Monitoring provider: observed ; source-published ; retrieved .
  2. Monitoring provider: observed ; source-published ; retrieved .
  3. Monitoring provider: observed ; source-published ; retrieved .
  4. Monitoring provider: observed ; source-published ; retrieved .
  5. Monitoring provider: observed ; source-published ; retrieved .
  6. Monitoring provider: observed ; source-published ; retrieved .

Provider records

Every stored provider record behind this claim, newest first.

  1. Provider credit
    RecentBreaches
    Provider URL
    https://recentbreaches.com/breach/deom-be-safepay-2026-11
    Feed id
    recentbreaches
    Provider record id
    derived-sha256:29d6ef898cf53fb76dfe8a1bde06e5252e7a2e6a27c96aa2e526373fdb46da82
    Observed
    Source-published
    Retrieved
    Format
    rss
    Transport
    https-rss
    Overlap class
    mirror
    Independent corroboration
    no
  2. Provider credit
    RansomLook
    Provider URL
    https://www.ransomlook.io/
    Feed id
    ransomlook
    Provider record id
    derived-sha256:bce1cd0e659039706e5d8ea91f398c4a57031e1a51774b6b86955c57082401df
    MISP event UUID
    1b5e9516-9c6a-5705-89f5-dd7c0a0b0a09
    Observed
    Source-published
    Retrieved
    Format
    json-array
    Transport
    https-rest
    Overlap class
    primary
    Independent corroboration
    yes
  3. Provider credit
    ransomware.live
    Provider URL
    https://www.ransomware.live/
    Feed id
    privtools-ransomposts
    Provider record id
    derived-sha256:889695faf22f33d355c120a74d310fec6fb9dcaf3434ff23225cc57d1993c496
    Observed
    Source-published
    Retrieved
    Format
    json-array
    Transport
    https-json
    Overlap class
    primary
    Independent corroboration
    yes
  4. Provider credit
    RansomFeed.it
    Provider URL
    https://ransomfeed.it/
    Feed id
    ransomfeed
    Provider record id
    37846
    Observed
    Source-published
    Retrieved
    Format
    json-array
    Transport
    https-json
    Overlap class
    primary
    Independent corroboration
    yes
  5. Provider credit
    CTI.FYI
    Provider URL
    https://cti.fyi/
    Feed id
    cti-fyi
    Provider record id
    derived-sha256:514fbe9d28446bbf03b6ac46300e74dfd33e06c60bf3b3fa1423154170de36d5
    Observed
    Source-published
    Retrieved
    Format
    paginated-rest
    Transport
    https-rest
    Overlap class
    primary
    Independent corroboration
    yes
  6. Provider credit
    cybercrime.works
    Provider URL
    https://cybercrime.works/leaks/9143abeb-885f-4b39-814e-d1ca071cff9f
    Feed id
    cybercrime-works
    Provider record id
    9143abeb-885f-4b39-814e-d1ca071cff9f
    Observed
    Source-published
    Retrieved
    Format
    paginated-rest
    Transport
    https-rest
    Overlap class
    primary
    Independent corroboration
    yes

Tracker record history

Newest entries first. These dates describe tracker records, not attack dates.

  1. Provider update: recorded ; associated provider observation .
  2. Provider update: recorded ; associated provider observation .
  3. Initial tracker record: recorded ; associated provider observation .