Ransomware Group intelligence

Medusa

Inactive

Track Medusa with 518 published victims and 10 known leak locations in a single intelligence view.

Victims 518 Known published victims in this dataset
First discovered 2023-01-11 Earliest victim discovery date
Last discovered 2026-02-14 Latest victim discovery date
Inactive since 154 days Days since the latest known victim
Top country United States 263 victims
Known locations 10 Leak or negotiation infrastructure tracked

Overview

Medusa is tracked by Breach House as a ransomware group with 518 published victims.

United States is currently the most targeted country in this dataset.

10 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (10)

    Label Type Availability Links
    Leak location 1 Onion service Unknown medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onion
    Leak location 2 Onion service Unknown medusakxxtp3uo7vusntvubnytaph4d3amxivbggl3hnhpk2nmus34yd.onion
    Leak location 3 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 4 Onion service Unknown dlmfciajg5s4vliyo5dhs5jyzhi2xr2fnkebul46lpf4xudtqiue4nid.onion
    Leak location 5 Onion service Unknown kyfiw76eol6ph2mq7pi5e5tdvce37bicddhai62qhdc5ja6jdchz4qqd.onion
    Leak location 6 Onion service Unknown s7lmmhlt3iwnwirxvgjidl6omcblvw2rg75txjfduy73kx5brlmiulad.onion
    Leak location 7 Web location Unknown 45.9.148.39
    Leak location 8 Onion service Unknown cx5u7zxbvrfyoj6ughw76oa264ucuuizmmzypwum6ear7pct4yc723qd.onion
    Leak location 9 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 10 Onion service Unknown hupxs7ps7md24kpz4lwsbra64abgxjx3pcc2wuca5ibawf2g5hlpfyqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (518)

    Search, filter and paginate the victim timeline for Medusa. Showing 201–300 of 518.

    Type Target Discovered Country Business Category Intel Link
    Ransomware World Vision Perú id14743 View details Peru Communication / Marketing
    Ransomware Construction Systems inc id14742 View details United States Construction / Real Estate
    Ransomware Østerås Bygg id14731 View details Norway Energy
    Ransomware Istrail id14627 View details Norway Manufacturing / Engineering
    Ransomware Albany College of Pharmacy id14626 View details United States Education
    Ransomware Arelance Group id14625 View details Spain IT
    Ransomware Emerson id14571 View details United States IT
    Ransomware BELL DATA, Inc id14536 View details Japan Services
    Ransomware Travel Alberta id14535 View details Canada Transportation / Travel
    Ransomware Isola id14517 View details Norway Communication / Marketing
    Ransomware Sub-Zero, Wolf, and Cove id14516 View details United States Communication / Marketing
    Ransomware Røros Hotell id14486 View details Norway Hospitality / Food & Beverage / Tourism
    Ransomware Xtera Communications id14478 View details United Kingdom Communication / Marketing
    Ransomware Hairstore id14454 View details Norway Retail / E-commerce
    Ransomware IP blue Software Solutions id14453 View details United States IT
    Ransomware Fritzøe Engros id14389 View details Norway Communication / Marketing
    Ransomware Wilson & Lafleur id14388 View details Canada Retail / E-commerce
    Ransomware Compass Group (2nd attack) id14363 View details Australia Telecommunications
    Ransomware Structural Concepts id14362 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Amerinational Community Services id14354 View details United States Services
    Ransomware Providence Public School Department id14353 View details United States Education
    Ransomware AZPIRED id14352 View details United States Public Sector
    Ransomware Compass Group id14351 View details Australia Services
    Ransomware Micron Internet id14285 View details Brazil Communication / Marketing
    Ransomware TECHNOLOG S.r.l. id14284 View details Italy IT
    Ransomware Starr-Iva Water & Sewer District id14262 View details United States Communication / Marketing
    Ransomware Karakaya Group id14261 View details Türkiye Finance / Legal / Insurance
    Ransomware Prosolit id14209 View details Belgium Communication / Marketing
    Ransomware Grupo Cortefiel id14208 View details Spain Retail / E-commerce
    Ransomware America Voice id14203 View details United States Communication / Marketing
    Ransomware Hospital Episcopal San Lucas id14176 View details United States Healthcare / Pharma
    Ransomware Kingsport Imaging Systems id14147 View details United States Communication / Marketing
    Ransomware Shomof Group id14141 View details United States Construction / Real Estate
    Ransomware Percento Technologies Internationa id13901 View details United States IT
    Ransomware The Pyle Group id13843 View details United States Services
    Ransomware Camp Susque id13652 View details United States Education
    Ransomware Ali Gohar id13651 View details Pakistan Healthcare / Pharma
    Ransomware St. Thomas Aquinas High School id13621 View details United States Education
    Ransomware Gentlemen Group GmbH id13594 View details Germany Services
    Ransomware Owens Valley Career Development Center id13524 View details United States IT
    Ransomware Coffrage LD id13523 View details Canada Manufacturing / Engineering
    Ransomware Vivara id13522 View details Brazil Retail / E-commerce
    Ransomware Cedar Technologies id13486 View details Brazil IT
    Ransomware American Golf id13485 View details United States NGOs / Associations
    Ransomware Royal Brighton Yacht Club id13484 View details Australia Communication / Marketing
    Ransomware ValeCard id13483 View details Brazil Finance / Legal / Insurance
    Ransomware H&H Group id13482 View details United States Communication / Marketing
    Ransomware Jariet Technologies id13481 View details United States IT
    Ransomware Globes id13480 View details Israel Finance / Legal / Insurance
    Ransomware AA Munro Insurance id13479 View details Canada Finance / Legal / Insurance
    Ransomware Strauss Brands id13286 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Harry Perkins Institute of medical research id13285 View details Australia Healthcare / Pharma
    Ransomware Viasat id13284 View details Spain Telecommunications
    Ransomware Olympus Group id13283 View details United States Communication / Marketing
    Ransomware Ontario West and Bill Blaney Insurance Brokers id13174 View details Canada Finance / Legal / Insurance
    Ransomware North Coast Petroleum id13173 View details Australia Energy
    Ransomware Tri-City College Prep High School id13116 View details United States Education
    Ransomware Fitzgerald, DePietro & Wojnas CPAs, P.C. id13115 View details United States Services
    Ransomware AJE id13114 View details Peru Hospitality / Food & Beverage / Tourism
    Ransomware Victoria Racing Club id13015 View details Australia Public Sector
    Ransomware GEMCO Constructors id12990 View details United States Public Sector
    Ransomware Dynamo Electric id12989 View details Canada Energy
    Ransomware Farnell Packaging id12988 View details Canada Other
    Ransomware Health People id12894 View details United States Healthcare / Pharma
    Ransomware IPPBX id12893 View details United States Services
    Ransomware Market Pioneer International Corp id12892 View details United States Transportation / Travel / Logistics
    Ransomware Mercy Drive Inc id12891 View details United States Services
    Ransomware Radiosurgery New York id12890 View details United States Healthcare / Pharma
    Ransomware Inside Broadway id12889 View details United States Public Sector
    Ransomware Oracle Advisory Services id12888 View details United States Services
    Ransomware Women's Sports Foundation id12887 View details United States NGOs / Associations
    Ransomware St. Helena id12795 View details United States Public Sector
    Ransomware Sems and Specials id12787 View details United States Public Sector
    Ransomware Wichita County Mounted Patrol id12778 View details United States Public Sector
    Ransomware Brownell Boat Stands & Equipment Company id12777 View details United States Public Sector
    Ransomware Aztec Services Group id12649 View details United States Services
    Ransomware International Modern Hospital id12648 View details United Arab Emirates Healthcare / Pharma
    Ransomware Heras id12647 View details United Kingdom Services
    Ransomware WEICON id12609 View details Germany Communication / Marketing
    Ransomware County Connection id12608 View details United States Public Sector
    Ransomware Elm Grove id12607 View details United States Public Sector
    Ransomware Comwave id12606 View details Canada Communication / Marketing
    Ransomware Colonial Surety Company id12579 View details United States Communication / Marketing
    Ransomware Brick Court Chambers id12506 View details United Kingdom Finance / Legal / Insurance
    Ransomware NITEK International LLC id12502 View details United States Communication / Marketing
    Ransomware National Metalwares, L.P id12501 View details United States Manufacturing / Engineering
    Ransomware Merritt Properties, LLC id12386 View details United States Communication / Marketing
    Ransomware Autobell Car Wash, Inc id12385 View details United States Public Sector
    Ransomware One Toyota of Oakland id12364 View details United States Finance / Legal / Insurance
    Ransomware Chemring Group id12363 View details United Kingdom Communication / Marketing
    Ransomware Patterson & Rothwell Ltd id12293 View details United Kingdom Communication / Marketing
    Ransomware Boyden id12292 View details United States Services
    Ransomware W.F. Whelan id12291 View details United States Transportation / Travel / Logistics
    Ransomware Macildowie Associates id12272 View details United Kingdom Communication / Marketing
    Ransomware Lewis Brothers Bakeries id12238 View details United States Public Sector
    Ransomware S.A. Piazza & Associates id12237 View details United States Public Sector
    Ransomware MyoVision id12236 View details United States Healthcare / Pharma
    Ransomware Woodfords Family Services id12235 View details United States Services
    Ransomware Anders Group id12169 View details United States Healthcare / Pharma
    Ransomware The Council of Fashion Designers of America id12128 View details United States Public Sector