usdaw.org.uk, a prominent UK union, was targeted by the threat actor safepay in a ransomware attack aiming to encrypt sensitive data and disrupt operations. The incident highlights the ongoing cyber threats facing UK organizations, with the impact concentrated in the United Kingdom. #UnitedKingdom
Incident Details
- Victim: usdaw.org.uk
- Country: GB
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/usdaworguk/
- Discovered: 2025-12-29 20:11:37.668161
- Published: 2025-12-29 20:11:22.408058
Information
- Usdaw.org.uk was targeted in a ransomware incident.
- The attack was carried out by the actor named Safepay.
- Usdaw is one of the largest unions in the United Kingdom.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.