US, UK and German agencies issue joint #StopRansomware advisory on SafePay
Six agencies across three countries putting their names to one advisory signals that SafePay is an established operator that law enforcement prioritises, not an opportunistic newcomer. Security teams should run the advisory's indicators against their logs now, rather than file it for later. Boards and insurers are likely to ask whether that review has been done.
What Happened
On 20 October 2026 the FBI, CISA, the US Secret Service, Germany's Landeskriminalamt Rheinland-Pfalz, the UK's National Crime Agency and the UK's North West Regional Organised Crime Unit released joint advisory AA26-293A on SafePay ransomware. The advisory says SafePay actors have been highly active since August 2024 and have targeted businesses and critical infrastructure across North America, South America, Europe and Australia.
Why It Matters
Six agencies across three countries putting their names to one advisory signals that SafePay is an established operator that law enforcement prioritises, not an opportunistic newcomer. Security teams should run the advisory's indicators against their logs now, rather than file it for later. Boards and insurers are likely to ask whether that review has been done.
Sources
- Cybersecurity and Infrastructure Security Agency (CISA) (opens in a new tab): #StopRansomware: SafePay Ransomware (2026-10-20)
- FBI Internet Crime Complaint Center (IC3) (opens in a new tab): StopRansomware: SafePay Ransomware (2026-10-20)
More From This Briefing
- CISA urges immediate patching of critical 'php2shell' PHP flaws leaked before a fix existed
- Compromised LiteLLM release targeted cloud, developer and AI provider credentials
- Nvidia unveils prefabricated DSX pods and waterless data centre specifications
- ISG study for Bermuda-based mea finds 86% of insurers would rework outsourcing deals for AI
This story is part of the Laurenceo Intelligence briefing for 22 October 2026, a daily sourced briefing on AI, technology and enterprise risk published in Bermuda by Laurenceo, founded by Jorai Laurenceo. It is produced by an automated research pipeline and checked before publication; how this is made. General information only, not legal, regulatory or financial advice.