bootstransport.ca Listed by safepay Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On May 4, 2026, the ransomware group safepay listed bootstransport.ca on its leak site, claiming to have carried out a ransomware attack against the Canadian company. Public information about the incident remains limited to that listing; no confirmation of the claim has been issued by bootstransport.ca, and details such as the number of individuals affected or the precise volume of data involved have not been disclosed.

Ransomware operations that combine encryption with data exfiltration continue to target organizations holding operational records. When such an incident is alleged against a logistics provider, the potential reach extends beyond the company itself to the supply chains and customers it serves.

What happened

The only publicly reported detail is the May 4, 2026 listing by safepay. The group claims it exfiltrated internal files during a ransomware attack. No information has been released about the date of the intrusion, the method of initial access, the duration of unauthorized access, or whether any data was published after the listing. The number of people affected is recorded as unknown.

Who is safepay?

Safepay is a ransomware group that maintains a leak site to publish data it claims to have obtained from victims. Like other groups of this type, it typically pairs file encryption on targeted systems with the removal of copies of internal documents, then uses the threat of disclosure to press for payment. The group has appeared in public reporting on multiple incidents involving commercial organizations, though each listing remains an unverified claim until corroborated by the affected entity or independent investigation.

About bootstransport.ca

Bootstransport.ca is a Canadian transportation and logistics company that provides freight delivery and supply chain services. Organizations in this sector routinely maintain records related to shipments, customer accounts, carrier contracts, and operational scheduling. A compromise at such a firm can intersect with the data of many other businesses that rely on its services for the movement of goods.

What data was at risk

The listing refers only to “internal files exfiltrated.” No inventory of specific file types, record categories, or data fields has been published. Transportation and logistics companies commonly hold information such as consignment details, addresses, contact information, and commercial agreements; however, whether any of these categories were among the files referenced in the claim is unconfirmed.

The real-world impact

Individuals or businesses whose records appear in the exfiltrated files could face follow-on risks such as targeted phishing or misuse of commercial information. For the company, the incident may involve costs related to investigation, system restoration, and regulatory notifications, though the scale of these effects cannot be assessed from currently available information. Supply-chain partners may also experience indirect disruption if operational data is involved.

Were you affected?

If you have done business with bootstransport.ca or its carriers, monitor official statements from the company for any notification process. As a first step, review recent emails and postal correspondence for any direct contact. You can also run a free exposure scan of your email address against known breach data sets to check whether your information has appeared in previously published incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.