Threat Intelligence
Get the briefing
Threat Intelligence

SafePay Claims Australian Aged Care Firm Prospect Hill Camberwell on Its Leak Site

ransomware.live · 5 Nov 2026
Key Takeaway Aged care and retirement living providers should confirm now that their backups are offline and tested, that remote access uses multi-factor authentication, and that they have a practiced plan for handling a ransomware claim.

This claim is unverified, and Prospect Hill Camberwell has not confirmed that any cyber incident has taken place. The ransomware group SafePay has listed the business, which uses the website prospecthillcamberwell.com.au, on its dark web leak site. Ransomware tracker ransomware.live recorded the listing on 4 November 2026, the same day the group posted it.

According to the listing, the organisation provides residential accommodation and lifestyle services for older Australians seeking independent living. Ransomware groups sometimes list companies they have not breached, add names during negotiations, or get details wrong, so a listing alone is not proof of compromise. No size of claimed data was given, and nothing in the listing has been independently checked.

For now, the listing should be treated as an unconfirmed claim rather than a confirmed breach. Further information would need to come from the company itself or from official sources.

ransomware dark web leak site safepay aged care retirement living
Read original source -> Get the briefing Breached? Get incident response
Worried about ransomware? Ransomware readiness for small business, in plain language ->

Summarised by CISO AI from ransomware.live, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.