Berlinmobil.de

Berlinmobil.de was compromised in a ransomware attack attributed to safepay in May 2026. The organization, operating in the Transportation/Logistics sector in Germany, was added to the group's data leak site as part of an extortion campaign.

safepay operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Is a German transportation company headquartered in Berlin, specializing in bus charter services, passenger transportation, school transport, and mobility solutions …