Ransomware Group intelligence

Medusa

Inactive

Track Medusa with 518 published victims and 10 known leak locations in a single intelligence view.

Victims 518 Known published victims in this dataset
First discovered 2023-01-11 Earliest victim discovery date
Last discovered 2026-02-14 Latest victim discovery date
Inactive since 154 days Days since the latest known victim
Top country United States 263 victims
Known locations 10 Leak or negotiation infrastructure tracked

Overview

Medusa is tracked by Breach House as a ransomware group with 518 published victims.

United States is currently the most targeted country in this dataset.

10 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (10)

    Label Type Availability Links
    Leak location 1 Onion service Unknown medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onion
    Leak location 2 Onion service Unknown medusakxxtp3uo7vusntvubnytaph4d3amxivbggl3hnhpk2nmus34yd.onion
    Leak location 3 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 4 Onion service Unknown dlmfciajg5s4vliyo5dhs5jyzhi2xr2fnkebul46lpf4xudtqiue4nid.onion
    Leak location 5 Onion service Unknown kyfiw76eol6ph2mq7pi5e5tdvce37bicddhai62qhdc5ja6jdchz4qqd.onion
    Leak location 6 Onion service Unknown s7lmmhlt3iwnwirxvgjidl6omcblvw2rg75txjfduy73kx5brlmiulad.onion
    Leak location 7 Web location Unknown 45.9.148.39
    Leak location 8 Onion service Unknown cx5u7zxbvrfyoj6ughw76oa264ucuuizmmzypwum6ear7pct4yc723qd.onion
    Leak location 9 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 10 Onion service Unknown hupxs7ps7md24kpz4lwsbra64abgxjx3pcc2wuca5ibawf2g5hlpfyqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (518)

    Search, filter and paginate the victim timeline for Medusa. Showing 1–100 of 518.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Balloons Everywhere id26547 View details United States Communication / Marketing
    Ransomware South Hays Fire Department id26546 View details United States Public Sector
    Ransomware Comune di Battipaglia id26545 View details Italy Public Sector
    Ransomware Grandview Family Medicine id26544 View details United States Healthcare / Pharma
    Ransomware MESA Products id26543 View details United States Communication / Marketing
    Ransomware Resource Corporation of America id25285 View details United States Healthcare / Pharma
    Ransomware JBS id25174 View details United States Communication / Marketing
    Ransomware Thunder Bay Counselling id24943 View details Canada Services
    Ransomware Sampoerna Agro id24942 View details Indonesia Energy
    Ransomware Shamrock Technologies id24941 View details United States Communication / Marketing
    Ransomware Callipo Group id24940 View details Italy Communication / Marketing
    Ransomware Universidade Municipal de São Caetano id24320 View details Brazil Education
    Ransomware WR Comercial id24319 View details Brazil Services
    Ransomware Concord Academy id24318 View details United States Education
    Ransomware General Distributing id24121 View details United States Retail / E-commerce
    Ransomware FDC Interiors id24120 View details United Arab Emirates Communication / Marketing
    Ransomware MFE Formwork Technology id24119 View details Singapore IT
    Ransomware Nationwide Legal LLC id24118 View details United States Finance / Legal / Insurance
    Ransomware Atrium Living Centers id23749 View details United States Healthcare / Pharma
    Ransomware Simon Property Group id23728 View details United States Retail / E-commerce
    Ransomware Clackamas Community College id23727 View details United States Education
    Ransomware LaRosa’s Pizzeria id23726 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Oscars Group id23725 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware PT Kalimantan Prima Persada id23724 View details Indonesia Communication / Marketing
    Ransomware Adore Children and Family Services id23369 View details United States Services
    Ransomware ATIRG id23368 View details France Healthcare / Pharma
    Ransomware Cooperativa Esercenti Farmacia Scrl id23367 View details Italy Agriculture / Food
    Ransomware Alissa Group id23366 View details Saudi Arabia Transportation / Travel / Logistics
    Ransomware Imagicle id23225 View details Italy Communication / Marketing
    Ransomware Linxx Global Solutions id23224 View details United States Services
    Ransomware DALCANS id23223 View details France Communication / Marketing
    Ransomware Leprohon (Image !) id23038 View details Communication / Marketing
    Ransomware LA VOIE EXPRESS id23037 View details Morocco Communication / Marketing
    Ransomware Design To Print id23036 View details United States Communication / Marketing
    Ransomware EcoPetróleo id23035 View details Brazil Communication / Marketing
    Ransomware Cemtrex id23034 View details United States Manufacturing / Engineering
    Ransomware Lux Actuaries & Consultants id22880 View details United Arab Emirates Communication / Marketing
    Ransomware CCMC id22803 View details United States Communication / Marketing
    Ransomware Comcast id22802 View details United States Services
    Ransomware Organon id22801 View details United States Healthcare / Pharma
    Ransomware Insightin Health id22800 View details United States Healthcare / Pharma
    Ransomware Future Generali id22799 View details India Communication / Marketing
    Ransomware Leprohon id22798 View details Canada Communication / Marketing
    Ransomware LGB id22797 View details United Kingdom Communication / Marketing
    Ransomware Cariri id22319 View details Trinidad and Tobago IT
    Ransomware Rad-Solutions, LLC id22186 View details United States Services
    Ransomware Level id22096 View details United States Public Sector
    Ransomware TEAM GROUP id22095 View details Thailand Services
    Ransomware Aldagi id21981 View details Georgia Finance / Legal / Insurance
    Ransomware Expert E-commerce GmbH id21852 View details Germany Retail / E-commerce
    Ransomware Florarte id21851 View details Brazil Communication / Marketing
    Ransomware PANSARD & ASSOCIES id21589 View details France Finance / Legal / Insurance
    Ransomware Franklin Pierce Schools id21496 View details United States Education
    Ransomware White Coffee Corporation id21495 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware R&W Engineering id20995 View details United States Manufacturing / Engineering
    Ransomware Sun Direct id20994 View details India Services
    Ransomware Southwest CARE Center id20993 View details United States Healthcare / Pharma
    Ransomware Sermo id20992 View details United States Healthcare / Pharma
    Ransomware Prosecuting Attorneys' Council of Georgia id20991 View details United States Communication / Marketing
    Ransomware Bumfords id20544 View details United Kingdom Services
    Ransomware Hartwig Mechanical Inc id20543 View details United States Construction / Real Estate
    Ransomware San Jose Country Club id20542 View details United States Communication / Marketing
    Ransomware Bailey's id20379 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Presort First Class id20378 View details United States Communication / Marketing
    Ransomware RE/MAX id20377 View details United States Construction / Real Estate
    Ransomware Town of North Providence Rhode Island corporate office id20376 View details United States Communication / Marketing
    Ransomware DSI Tech id20123 View details United States IT
    Ransomware Trindel Insurance Fund id20010 View details United States Finance / Legal / Insurance
    Ransomware Nottingham Construction id20009 View details United Kingdom Construction / Real Estate
    Ransomware DeVita & Associates, Inc. id20008 View details United States Communication / Marketing
    Ransomware Lake Shore Paving id19950 View details United States Energy
    Ransomware Russell Child Development Center id19949 View details United States IT
    Ransomware Weil Construction, Inc id19658 View details United States Construction / Real Estate
    Ransomware Matthews Law id19587 View details United States Finance / Legal / Insurance
    Ransomware Phelps United id19586 View details United States Retail / E-commerce
    Ransomware Conditioned Air Corporation id19585 View details United States Communication / Marketing
    Ransomware Appalachian Regional Commission id19584 View details United States Public Sector
    Ransomware Lithium Americas Nevada id19261 View details United States Construction / Real Estate
    Ransomware MRC de Maskinongé - district id19260 View details Canada Public Sector
    Ransomware Pawnee Heights Unified School District id19182 View details United States Education
    Ransomware McFarland Commercial Insurance Services id19118 View details United States Finance / Legal / Insurance
    Ransomware Bridgebank Limited id19117 View details United Kingdom Finance / Legal / Insurance
    Ransomware Pulse Urgent Care id19116 View details United States Healthcare / Pharma
    Ransomware National Association for Stock Car Auto Racing id19115 View details United States NGOs / Associations
    Ransomware Fall River Public Schools id19114 View details United States Education
    Ransomware Krypton Solutions id19000 View details United States Services
    Ransomware FS Tool Corporation id18999 View details Canada Manufacturing / Engineering
    Ransomware Family Health Services, Inc id18799 View details United States Healthcare / Pharma
    Ransomware Business Software Solutions id18798 View details United States Services
    Ransomware O'Shea Builders id18797 View details United States Communication / Marketing
    Ransomware AutoCanada id18624 View details Canada Manufacturing / Engineering
    Ransomware Advance Tapes International id18616 View details United Kingdom Communication / Marketing
    Ransomware National Safety Council id18558 View details United States Public Sector
    Ransomware Augusta Industrial Services, Inc. id18557 View details United States Manufacturing / Engineering
    Ransomware Champions Group id18556 View details India Services
    Ransomware J McCann & Co Ltd id18555 View details United Kingdom Construction / Real Estate
    Ransomware Big Horn County School District #4 id18554 View details United States Education
    Ransomware SRP Companies (Second lock! + Company scam!) id18444 View details United States Communication / Marketing
    Ransomware Coldwell Banker D’Ann Harper, REALTORS id18443 View details United States Finance / Legal / Insurance
    Ransomware Portland Street Honda id18407 View details Canada Communication / Marketing