Pell City Schools, a public K-12 school district based in Pell City, Alabama, has allegedly been compromised by the SafePay ransomware group. The district, which serves students from pre-kindergarten through 12th grade across eight schools, was listed on the group’s dark web leak site on December 23, 2025. The threat actors have initiated a countdown timer—currently showing approximately two days remaining—indicating a deadline for the district to respond to extortion demands before potential punitive actions, such as data publication, occur.
According to the actor, the district’s internal systems have been breached. While the initial proof of compromise provided on the leak site does not explicitly itemize a file tree, the SafePay group is a known “double extortion” operator that typically exfiltrates sensitive organizations’ data prior to encryption.
Daily Dark WebRead More
R1
T1
