Ransomware needs a way in. Stolen credentials are the cheapest one.

Ryomo Co., Ltd. Ransomware Attack

ryomo.co.jpRansomed

safepayGroup

JapanCountry

Sep 15, 2026Discovered

Overview

View group profile

Domain

ryomo.co.jp

Industry

Technology

Country

Japan

Discovered

3 days ago

Attack date

Sep 15, 2026

Confidence

85%

Severity

Medium

Status

Claimed

Threat group

safepay

Total victims

243

First seen

Oct 2025

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

Threat level

4.1/10

Aggressiveness10/10

Lethality0/10

Criticality2.1/10

Status breakdown

Claimed

this victim

100.0%243

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Technology

Known target sector

Country

Japan

Frequently targeted country

Other victims

View all (243)

Same group · safepay

Marlin Mechanical Inc.
United States
Claimed
Neumerkel GmbH
Germany
Claimed
Triniti Home Health & Hospice
United States
Claimed
Centro Hospitalario La Concepción
Mexico
Claimed
meterex
Germany
Claimed
Stöcklin Möbel AG
Switzerland
Claimed

Group activity

Monthly attacks · safepay

243

total · avg 20.3/mo