Upland.k12.ca.us in the US reported a ransomware incident, disrupting a district that delivers comprehensive K–12 education across 14 schools (elementary, junior high, and high school). The attack was attributed to the SafePay threat actor, with impacts affecting #UnitedStates.
Incident Details
- Victim: upland.k12.ca.us
- Sector: Education
- Country: US
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/uplandk12caus/
- Discovered: 2026-07-24T21:59:45.844758+00:00
- Published: 2026-07-24T21:59:32.608577+00:00
Information
- Provides comprehensive education from kindergarten through twelfth grade.
- Operates 14 schools, including elementary, junior high, and high schools.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.