The Safepay Ransomware gang is threatening to leak 3.5TB data related to the alleged Ingiant Ingram Micro from the company’s compromised system earlier this month.
Ingram is one of the world’s largest trade-to-business service providers and technology distributors, providing a variety of solutions for resellers and managed service providers worldwide, including hardware, software, cloud services, logistics, and training.
While Bleepingcomputer first stated on 5 July that Safepay was behind the incident, the Rainmware Gang did not claim responsibility for the attack until the beginning of this week, when he added the tech to the tech to his dark web leaked portal.
Safepay Ransomware is a private operation that surfaced in September 2024 and since then more than 260 victims have been added to their leaked site; However, the actual number is likely to be large, as only the victims who do not pay are listed.
They are also known to steal sensitive documents before encrypting the systems of the victims and threatened to leaked this stolen data on the dark web if ransom is not paid.
Since the beginning of the year, Safepay has become One of the most active ransomware groupsFilling the differences left by lockbit and blackcat (ALPHV) ransomware.

As Bleepingcomputer reported earlier this month, Ingram Micro also faced the global outage due to the Safepay Ransomware attack, employees asked the house and company website to work and take offline to the ordering system.
Since then, Bleepingcomputer has learned that the company has been working on restoring VPN access to employees and has also reset the company-wide password and multi-factor authentication (MFA).
Ingram micro recovered from the incident quickly, restoring several internal systems and platforms within days affected by the attack, employees allow more access to its ordering system.
“Ingram Micro is pleased to report that we are now operating in all countries and regions, where we transact business. Our team continues to perform at a fast pace to serve and support our customers and seller partners,” Ingrama Micro Announced Exactly four days after the attack was revealed.
However, the company has not yet confirmed whether Safepay Ransomware was behind the violation and whether the attackers stole data from their compromised systems.
An ingram was not immediately available for micro spokes comment when Bleepingcomputer arrived out for more information earlier today.
CISOS knows how to purchase a board begins with a clear, strategic approach how the cloud safety runs the business price.
This helps to introduce the risk, impact and priorities to the free, editable board report deck deck security leaders in clear business terms. Convert security updates into meaningful conversations and take fast decision in boardroom.