Ransomware Group intelligence

Medusa

Inactive

Track Medusa with 518 published victims and 10 known leak locations in a single intelligence view.

Victims 518 Known published victims in this dataset
First discovered 2023-01-11 Earliest victim discovery date
Last discovered 2026-02-14 Latest victim discovery date
Inactive since 154 days Days since the latest known victim
Top country United States 263 victims
Known locations 10 Leak or negotiation infrastructure tracked

Overview

Medusa is tracked by Breach House as a ransomware group with 518 published victims.

United States is currently the most targeted country in this dataset.

10 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (10)

    Label Type Availability Links
    Leak location 1 Onion service Unknown medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onion
    Leak location 2 Onion service Unknown medusakxxtp3uo7vusntvubnytaph4d3amxivbggl3hnhpk2nmus34yd.onion
    Leak location 3 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 4 Onion service Unknown dlmfciajg5s4vliyo5dhs5jyzhi2xr2fnkebul46lpf4xudtqiue4nid.onion
    Leak location 5 Onion service Unknown kyfiw76eol6ph2mq7pi5e5tdvce37bicddhai62qhdc5ja6jdchz4qqd.onion
    Leak location 6 Onion service Unknown s7lmmhlt3iwnwirxvgjidl6omcblvw2rg75txjfduy73kx5brlmiulad.onion
    Leak location 7 Web location Unknown 45.9.148.39
    Leak location 8 Onion service Unknown cx5u7zxbvrfyoj6ughw76oa264ucuuizmmzypwum6ear7pct4yc723qd.onion
    Leak location 9 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 10 Onion service Unknown hupxs7ps7md24kpz4lwsbra64abgxjx3pcc2wuca5ibawf2g5hlpfyqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (518)

    Search, filter and paginate the victim timeline for Medusa. Showing 101–200 of 518.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Karen S Pouliot id18406 View details Services
    Ransomware Customer Management Systems id18290 View details United States Services
    Ransomware CPI Books id18289 View details United Kingdom Communication / Marketing
    Ransomware Bell Ambulance id18117 View details United States Healthcare / Pharma
    Ransomware Kable Product Services id18110 View details United States Communication / Marketing
    Ransomware City of Aurora id18109 View details United States Public Sector
    Ransomware Aurora Boardworks id17798 View details United States Agriculture / Food
    Ransomware Heartland Health Center id17797 View details United States Healthcare / Pharma
    Ransomware Laurens School District 56 id17796 View details United States Education
    Ransomware Mundelein Park & Recreation District id17795 View details United States Communication / Marketing
    Ransomware Friendship House id17794 View details United States Healthcare / Pharma
    Ransomware Metropolitan Borough of Gateshead id17715 View details United Kingdom Public Sector
    Ransomware Martin Energy Group Services id17714 View details United States Energy
    Ransomware G&S Electric LLC id17713 View details United States Public Sector
    Ransomware Benton Police Department id17712 View details United States Public Sector
    Ransomware Robinson Family Dentistry id17657 View details United States Healthcare / Pharma
    Ransomware Crager LaBorde id17656 View details United States Services
    Ransomware HCRG Care Group id17655 View details United Kingdom Healthcare / Pharma
    Ransomware Cache Valley ENT id17500 View details United States Healthcare / Pharma
    Ransomware JP Express id17499 View details United States Communication / Marketing
    Ransomware Central District Health Department id17498 View details United States Public Sector
    Ransomware Natures Organics id17436 View details Australia Agriculture / Food
    Ransomware Paignton Zoo id17435 View details United Kingdom NGOs / Associations
    Ransomware SRP Companies id17434 View details United States Retail / E-commerce
    Ransomware Braum's id17433 View details United States Agriculture / Food
    Ransomware Grail Springs Retreat id17355 View details Canada Communication / Marketing
    Ransomware Rural Health Services id17354 View details United States Healthcare / Pharma
    Ransomware Adler Shine LLP id17353 View details United Kingdom Communication / Marketing
    Ransomware SimonMed Imaging id17352 View details United States Healthcare / Pharma
    Ransomware PAD Aviation Technics GmbH id17351 View details Germany IT
    Ransomware Serenity Salon & Spa id17350 View details United States Services
    Ransomware Michael’s Hair Body Mind id17349 View details Canada Services
    Ransomware Greenwich Medical Spa id17348 View details United States Healthcare / Pharma
    Ransomware Brockway Hair Design id17305 View details United States Education
    Ransomware True World Foods id17304 View details United States Agriculture / Food
    Ransomware MEDES College id17303 View details Canada Education
    Ransomware Glow Medi Spa id17302 View details Canada Healthcare / Pharma
    Ransomware Fayez Spa id17082 View details Canada Communication / Marketing
    Ransomware Dolmor Salon id17081 View details Canada Services
    Ransomware Beauty Works Spa id17080 View details Canada Healthcare / Pharma
    Ransomware Trimaco id17079 View details United States Communication / Marketing
    Ransomware Miles Industries id16978 View details United Kingdom Construction / Real Estate
    Ransomware Addison Saws id16977 View details United Kingdom Manufacturing / Engineering
    Ransomware English Braids id16976 View details United Kingdom Communication / Marketing
    Ransomware Aden Footwear id16975 View details Canada Retail / E-commerce
    Ransomware NG Automatics id16974 View details United Kingdom Retail / E-commerce
    Ransomware Philip Laney & Jolly id16973 View details United Kingdom Construction / Real Estate
    Ransomware ARDEX Australia id16972 View details Australia Communication / Marketing
    Ransomware Berman Brothers id16788 View details United States Manufacturing / Engineering
    Ransomware Chappell Schools id16787 View details United States Education
    Ransomware Safco International Gen Trading id16786 View details United Arab Emirates Agriculture / Food
    Ransomware Hospital El Cruce id16785 View details Argentina Healthcare / Pharma
    Ransomware D & M Trim id16725 View details United States Communication / Marketing
    Ransomware Delta Fabrication and Machine, Inc id16726 View details United States Manufacturing / Engineering
    Ransomware Prestige Maintenance USA id16678 View details United States Communication / Marketing
    Ransomware Indus Towers id16658 View details India Telecommunications
    Ransomware The Metropolitan Borough of Gateshead id16657 View details United Kingdom Public Sector
    Ransomware AVI Southeast id16656 View details United States Public Sector
    Ransomware Rent-2-Own id16556 View details United States Retail / E-commerce
    Ransomware Albion College id16286 View details United States Education
    Ransomware Broker Educational Sales & Training id16226 View details United States Education
    Ransomware Westfield Fire Department id16085 View details United States Public Sector
    Ransomware North Los Angeles County Regional Center id16084 View details United States Public Sector
    Ransomware Clarkson Insurance Group id16083 View details United States Finance / Legal / Insurance
    Ransomware Inmobiliaria Armas id15973 View details Chile Construction / Real Estate
    Ransomware Bergerhof id15972 View details Netherlands Transportation / Travel / Logistics
    Ransomware Ainsworth Game Technology Limited id15971 View details United States IT
    Ransomware Brodsky Renehan Pearlstein & Bouquet, Chartered id15896 View details United States Finance / Legal / Insurance
    Ransomware Levicoff Law Firm, P.C id15894 View details United States Finance / Legal / Insurance
    Ransomware Avico Spice id15794 View details United States Communication / Marketing
    Ransomware Down East Granite id15793 View details United States Other
    Ransomware Wiley Metal Fabricating id15792 View details United States Manufacturing / Engineering
    Ransomware Kela Health id15639 View details Belgium Healthcare / Pharma
    Ransomware Fancy Foods id15638 View details United States Agriculture / Food
    Ransomware Perfection Plus Services Inc id15623 View details United States Services
    Ransomware RDS Electric id15532 View details United States Communication / Marketing
    Ransomware Maxeon id15406 View details Singapore Energy
    Ransomware Apple Electric Ltd id15385 View details United States Construction / Real Estate
    Ransomware LEGO Construction Co id15384 View details United States Construction / Real Estate
    Ransomware Logistical Software Ltd id15383 View details United Kingdom IT
    Ransomware Manens-Tifs SpA id15382 View details Italy Manufacturing / Engineering
    Ransomware DynamicSystems id15297 View details United States Services
    Ransomware Marisa S.A id15227 View details Brazil Retail / E-commerce
    Ransomware Alliance Technical Group id15206 View details United States IT
    Ransomware Jomar Electrical Contractors id15205 View details United States Construction / Real Estate
    Ransomware Howell Electric Inc id15204 View details United States Construction / Real Estate
    Ransomware McMillan Electric Company id15156 View details United States Communication / Marketing
    Ransomware International University of Sarajevo id15143 View details Bosnia and Herzegovina Education
    Ransomware Whitaker Construction Group id15142 View details United States Construction / Real Estate
    Ransomware United Sleep Diagnostics id15109 View details United States Public Sector
    Ransomware Spirit Lake Community School District id15056 View details United States Education
    Ransomware Lakesight Technologies Information id15012 View details Germany IT
    Ransomware Island Coastal Services Ltd id15011 View details Canada Services
    Ransomware Automha id14886 View details Italy Transportation / Travel / Logistics
    Ransomware American Mechanical, inc id14885 View details United States Manufacturing / Engineering
    Ransomware American Medical Billing id14884 View details United States Healthcare / Pharma
    Ransomware Ideker id14773 View details United States Construction / Real Estate
    Ransomware Ultimate Removal id14772 View details United States Construction / Real Estate
    Ransomware Inner City Education Foundation id14771 View details United States Education
    Ransomware SystemPavers id14770 View details United States Public Sector