inttrust.gr Listed by safepay Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On December 14, 2025, the ransomware group safepay listed inttrust.gr on its leak site and stated that internal files had been taken from the Greek company. The number of people whose information may be involved has not been disclosed. The incident matters because inttrust.gr is an information technology and consulting firm whose systems can contain records about clients, partners, and employees. When such an organization appears on a ransomware leak site, the practical question for those connected to it is whether their details have moved beyond the company’s control.

Breaking down the breach

The only confirmed public detail is the listing itself. The group claims to have exfiltrated internal files during a ransomware attack. No figure has been released for the volume of data, the number of records, or the number of individuals affected. The date the files were taken and the method used to gain access remain undisclosed.

Inside safepay

Safepay is a ransomware group that publishes claims of compromise on a dedicated leak site. Its typical pattern involves encrypting systems and threatening to release stolen material unless a ransom demand is met. The group has previously listed organizations from multiple countries and sectors. In this case the listing of inttrust.gr stands as the group’s assertion; independent confirmation of the claimed data has not been made public.

Who is inttrust.gr?

InTTrust S.A. is a Greek information technology and consulting firm headquartered in Agia Paraskevi, Athens. It was founded in 2006. Companies of this type routinely hold client project files, internal communications, employee records, and technical documentation. A breach at such a firm can therefore touch both the organization’s own operations and the data of organizations it serves.

The information in question

The listing refers to internal files taken in a ransomware attack. No further breakdown of file types or data categories has been released. While firms in this sector commonly store client contracts, technical specifications, and personnel information, the precise contents of the material claimed by the group are unconfirmed.

What's at stake

For individuals, the main concern is whether any personal or professional identifiers have left the company’s environment. For the organization, the incident adds operational disruption, potential regulatory scrutiny, and the need to review access controls and incident response procedures. The absence of a confirmed data inventory means the full scope of downstream effects cannot yet be measured.

What to do if you're exposed

Anyone who has done business with inttrust.gr or worked there should watch for unusual account activity and consider changing passwords on any services linked to the company. Enabling multi-factor authentication on important accounts reduces the value of stolen credentials. Readers can also run a free exposure scan of their email address against known breach data to check whether their information appears in public listings.

AICompiled with AI assistance from public sources and published under our editorial standards.