uaa.mx
Mexico1 source
Claimed:SafePay claimed it on a ransomware leak site on 31 Oct 2026. Not confirmed by the organisation, so treat it as a claim, not a fact.
SafePay ransomware group claims breach at Mexican university uaa.mx
The SafePay ransomware group listed uaa.mx, a Mexican higher education institution, as a victim. The leak-site entry contains no substantive description of the incident or data volumes.
- Type
- Ransomware
- Sector
- Education
- Claimed by
- SafePay
- First reported
- 31 Oct 2026
- Latest source
- 31 Oct 2026
What to do
- This is only a claim by the attackers so far. Do not panic, but do the basics:
- Expect delays if you rely on this organisation's services, and keep records of anything you are owed.
- If you have an account, change that password, and anywhere you reused it.
- Treat this as unverified. Ask the organisation directly before acting on it.
- If you connect to this organisation (VPN, file transfer, email), review and restrict those links until they confirm containment.
- Check that your own backups are offline or immutable and that you have tested a restore recently.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for uaa.mx