What Happened
On July 1, 2026, the ransomware group SafePay claimed responsibility for a cyberattack against Arbeiterwohlfahrt Südost e.V. (awo-suedost.de), a German nonprofit, and said it would publish stolen data unless the organization negotiated with them. The public sources I found do not confirm the exact data types exposed or the number of affected records; they only indicate a threatened “full leak” and show the incident as a claimed ransomware attack rather than a fully disclosed breach.
