Genealogy SA Hit by SafePay Ransomware, Sensitive Data Leaked on Dark Web Genealogy SA, Australia’s largest family history society with over 4,300 members and 230 volunteers, was targeted in a ransomware attack by the SafePay gang. The group listed the non-profit on its dark web leak site on 16 April, threatening to publish stolen data if demands were not met. SafePay later released the compromised files, which included business and financial documents, insurance records, historic genealogical data, personal correspondence, and internal templates. Genealogy SA confirmed the incident, stating it was first discovered in February 2026. The organization engaged cybersecurity experts to contain and investigate the breach, declaring the incident resolved and notifying affected members. SafePay, active since October 2024, has claimed over 450 victims across Australia, the UK, US, Italy, New Zealand, and other countries. The group denies operating as a ransomware-as-a-service (RaaS) provider. Recent high-profile attacks include Favelle Favco, a Malaysia-based heavy crane company with Australian offices, and Ingram Micro in July 2025, which exposed the personal data of 42,000 individuals.