Employee identity documents and Melbourne crane collapse data were posted to the dark web by SafePay ransomware gang.
A Malaysia-headquartered heavy crane company with offices in Australia has been listed as a ransomware victim by the SafePay cyber extortion group.
Favelle Favco was listed on the hacker’s darknet leak site in a 16 April post, alongside the full 237-gigabyte data set.
You’re out of free articles for this month
To continue reading the rest of this article, please log in.
The published data appears to contain a trove of information related to the company’s operations in Australia, where it has an office and production facilities in the Sydney suburb of Prestons.
Among the more than 140,000 files published by SafePay are passport and driver’s license scans of Australian employees, internal and customer correspondence, financial data, and technical details of many of the cranes manufactured by Favelle Favco.
Maintenance details are also included in the data, as well as documents and correspondence relating to a crane collapse that occurred in the Melbourne suburb of Derrimut in 2025.
Favelle Favco did not respond to Cyber Daily’s request for comment.
Who is SafePay?
SafePay was first observed in October 2024 and has claimed more than 450 victims since then.
The group has been observed targeting businesses in Australia, the United Kingdom, the United States, Italy, New Zealand, Canada, Belgium, Brazil, Germany, Barbados, and Argentina.
According to the group, it is not a ransomware-as-a-service (RaaS) operation.
“SafePay ransomware has never provided and does not provide the RaaS,” SafePay said on its leak site.
The group’s most recent Australian victim was NSW-based dental practice Smile Team Orthodontics, which was targeted by SafePay in March.
The group was also responsible for a ransomware attack on IT giant Ingram Micro in July 2025, which led to the company contacting more than 42,000 individuals whose PII had been compromised by the hackers.
Who is Favelle Favco?
Favelle Favco has offices in Malaysia, Australia, the Middle East, Europe, and the United States, and comprises two companies – Favelle Favco and Kroll.
The company is known for producing the Kroll K10000 – the largest crane tower in the world – and the largest luffing tower, the Favelle Favco M2480DX.
According to the company, “12 out of 14 of the world’s tallest buildings” were built with the assistance of customised heavy lift cranes built by Favelle Favco.
The company also boasts an Intelligent Automation division. As of 2023, the company had more than 508 employees worldwide.
Want to see more stories from trusted news sources?
Make Cyber Daily a preferred news source on Google.
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.
Tags:
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。