Bez Marine Interiors GmbH Data Breach

Bez Marine Interiors GmbH, a construction company based in Germany, was listed on the SafePay ransomware group’s dark web portal on July 6, 2026. This listing was identified by SOCRadar’s Dark Web Monitoring service and flagged due to the organization’s typical operational profile within the construction sector and its association with the bmiprojects.de domain. Bez Marine Interiors aligns with SafePay’s known targeting patterns, particularly their focus on German organizations, observed in recent weeks.

SOCRadar’s analysis of initial access vectors for Bez Marine Interiors GmbH, specifically querying stealer-log telemetry for the bmiprojects.de domain, returned no direct records. While this absence in the queried dataset does not confirm a lack of compromise, it suggests that any potential credential harvesting might have occurred through different domains, personal email aliases, or feeds not covered in the analyzed sample. SafePay ransomware groups commonly leverage infostealer-harvested credentials for initial access, sourcing them from underground marketplaces to gain access to corporate networks. CTI teams are advised to maintain vigilance with ongoing monitoring and proactive credential hygiene checks, rather than interpret a null query as an indication of no risk.

Disclaimer

This report is intended for threat intelligence and security awareness purposes. SOCRadar does not host, redistribute or buy stolen data. All breach information reported here is collected from publicly accessible threat actor and ransomware portals. This content is intended to equip CTI teams with context around recent attacks. While we strive for accuracy, listings on ransomware leak and extortion sites cannot always be independently verified and may not reflect confirmed breaches. If you believe any data in this report is incorrect, please contact us.