Back to all incidents

dwi-bau.de

dwi-bau.de
EMERGING

dwi-bau.de was listed on the Safepay ransomware extortion leak portal. The company specializes in building systems for metal roofs and facades, serving customers in the construction and building sectors. Its …

Observable Status EMERGING
Industry / Sector Other
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor Safepay
Affected Population Scope Under Audit
First Seen 2026-10-09
Last Updated 2026-10-09
Authentication Credentials
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

10% CONFIDENCE
1. Primary Authority UNVERIFIED CLAIM Base weight: 6%
2. Evidence Specificity +7% Domain & Scope Telemetry
3. Corroboration Curve +0% 1 independent domain
4. Timeline & Staleness -3% 1 milestone logged
Corroborated Source Domains:
ransomware.live

Technical Forensic Briefing

Incident Overview

dwi-bau.de, operating within the Other sector, has been subject to a cybersecurity incident initially observed on 2026-10-09. Ground-truth telemetry indicates the threat activity is attributed to threat actor Safepay.

dwi-bau.de was listed on the Safepay ransomware extortion leak portal. The company specializes in building systems for metal roofs and facades, serving customers in the construction and building sectors. Its …

Compromised Assets & Data Scope

The specific volume of affected customer or organizational records remains under active forensic investigation. Primary affected online infrastructure and perimeter domains include dwi-bau.de.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Authoritative Directives & Vendor Disclosures

  • Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.

Milestone Timeline (1 events logged)

2026-10-09 22:09 UTC
UNVERIFIED CLAIM

dwi-bau.de Listed on Safepay Ransomware Extortion Portal

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub