AC Small Maxwell & Co: Exclusive: NSW accounting and advisory firm allegedly hit by SafePay ransomware

AC Small Maxwell & Co Hit by SafePay Ransomware Gang in Latest Cyberattack

A century-old Australian accounting firm, AC Small Maxwell & Co, has been listed as a victim on the dark web leak site of the SafePay ransomware gang, with stolen data allegedly set for release in just over two days. The Grafton, NSW-based company, founded in 1916, provides accounting, financial planning, payroll, estate planning, and SMSF services to clients in the Clarence Valley region.

SafePay, which emerged in October 2024, has claimed over 500 victims across Australia, the UK, US, Italy, New Zealand, Canada, and other countries. Unlike many ransomware groups, SafePay denies operating as a ransomware-as-a-service (RaaS) operation. The gang has not provided evidence of the breach, such as data samples, and AC Small Maxwell & Co has not yet responded to requests for comment.

This incident follows SafePay’s recent claim of a cyberattack on Harcourts, a major Australian real estate firm. Harcourts confirmed the claim, stating it had engaged cybersecurity experts and implemented containment measures while investigating though no evidence of impact had been found at the time.

The attack on AC Small Maxwell & Co highlights the growing threat posed by ransomware groups targeting professional services firms, with potential risks to sensitive financial and client data.

Source: https://www.cyberdaily.au/security/13936-exclusive-nsw-accounting-and-advisory-firm-allegedly-hit-by-safepay-ransomware

AC Small Maxwell & Co TPRM report: https://www.rankiteo.com/company/ac-small-maxwell-co

"id": "ac-1784622363",
"linkid": "ac-small-maxwell-co",
"type": "Ransomware",
"date": "7/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Professional Services (Accounting, '
                                    'Financial Planning, Payroll, Estate '
                                    'Planning, SMSF)',
                        'location': 'Grafton, NSW, Australia',
                        'name': 'AC Small Maxwell & Co',
                        'type': 'Accounting Firm'}],
 'data_breach': {'data_exfiltration': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Sensitive financial and client '
                                             'data'},
 'description': 'A century-old Australian accounting firm, AC Small Maxwell & '
                'Co, has been listed as a victim on the dark web leak site of '
                'the SafePay ransomware gang, with stolen data allegedly set '
                'for release in just over two days. The attack highlights the '
                'growing threat posed by ransomware groups targeting '
                'professional services firms, with potential risks to '
                'sensitive financial and client data.',
 'impact': {'data_compromised': 'Sensitive financial and client data'},
 'investigation_status': 'Ongoing',
 'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'SafePay'},
 'references': [{'source': 'Dark web leak site (SafePay)'}],
 'threat_actor': 'SafePay ransomware gang',
 'title': 'AC Small Maxwell & Co Hit by SafePay Ransomware Gang',
 'type': 'Ransomware'}