Ransomware Group intelligence

Medusa

Inactive

Track Medusa with 518 published victims and 10 known leak locations in a single intelligence view.

Victims 518 Known published victims in this dataset
First discovered 2023-01-11 Earliest victim discovery date
Last discovered 2026-02-14 Latest victim discovery date
Inactive since 154 days Days since the latest known victim
Top country United States 263 victims
Known locations 10 Leak or negotiation infrastructure tracked

Overview

Medusa is tracked by Breach House as a ransomware group with 518 published victims.

United States is currently the most targeted country in this dataset.

10 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (10)

    Label Type Availability Links
    Leak location 1 Onion service Unknown medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onion
    Leak location 2 Onion service Unknown medusakxxtp3uo7vusntvubnytaph4d3amxivbggl3hnhpk2nmus34yd.onion
    Leak location 3 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 4 Onion service Unknown dlmfciajg5s4vliyo5dhs5jyzhi2xr2fnkebul46lpf4xudtqiue4nid.onion
    Leak location 5 Onion service Unknown kyfiw76eol6ph2mq7pi5e5tdvce37bicddhai62qhdc5ja6jdchz4qqd.onion
    Leak location 6 Onion service Unknown s7lmmhlt3iwnwirxvgjidl6omcblvw2rg75txjfduy73kx5brlmiulad.onion
    Leak location 7 Web location Unknown 45.9.148.39
    Leak location 8 Onion service Unknown cx5u7zxbvrfyoj6ughw76oa264ucuuizmmzypwum6ear7pct4yc723qd.onion
    Leak location 9 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 10 Onion service Unknown hupxs7ps7md24kpz4lwsbra64abgxjx3pcc2wuca5ibawf2g5hlpfyqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (518)

    Search, filter and paginate the victim timeline for Medusa. Showing 301–400 of 518.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Principle Cleaning Services id12127 View details United Kingdom Communication / Marketing
    Ransomware Ted Brown Music id12081 View details United States Retail / E-commerce
    Ransomware NORTHEAST OHIO NEIGHBORHOOD HEALTH SERVICES (NEON) id12078 View details United States Healthcare / Pharma
    Ransomware Lee University id11706 View details United States Education
    Ransomware Thermodyn Corporation id11687 View details United States Manufacturing / Engineering
    Ransomware Traverse City Area Public Schools id11655 View details United States Public Sector
    Ransomware Williams County Abstract Company id11651 View details United States Public Sector
    Ransomware Solano County Library id11650 View details United States Public Sector
    Ransomware Alliance Mercantile id11649 View details Canada Communication / Marketing
    Ransomware Novus International id11648 View details United States Agriculture / Food
    Ransomware John R. Wood Properties id11556 View details United States Communication / Marketing
    Ransomware Paducah Dermatology id11551 View details United States Healthcare / Pharma
    Ransomware Domestic Violence Project, Inc id11550 View details United States Communication / Marketing
    Ransomware Rairdon Automotive Group id11549 View details United States Manufacturing / Engineering
    Ransomware Integration International id11548 View details United States Services
    Ransomware Tarrant Appraisal District id11547 View details United States Communication / Marketing
    Ransomware Orientrose Contracts id11515 View details United Kingdom Construction / Real Estate
    Ransomware Sutton Dental Arts id11514 View details United States Healthcare / Pharma
    Ransomware San Pasqual Band of Mission Indians id11495 View details United States Public Sector
    Ransomware East Baton Rouge Sheriff's Office id11494 View details United States Finance / Legal / Insurance
    Ransomware Williams County Abstract Company id11458 View details United States Public Sector
    Ransomware PT Bank Pembangunan Daerah Banten Tbk id11427 View details Indonesia Finance / Legal / Insurance
    Ransomware Regina Dental Group id11345 View details United States Healthcare / Pharma
    Ransomware Impac Mortgage Holdings id11344 View details United States Transportation / Travel / Logistics
    Ransomware Henry County, Illinois id11329 View details United States Public Sector
    Ransomware Suburban Surgical Care Specialists id11294 View details United States Public Sector
    Ransomware Accipiter Capital Management, LLC id11284 View details United States Services
    Ransomware Urban Strategies id11283 View details United States Communication / Marketing
    Ransomware Romark Laboratories id11264 View details United States Healthcare / Pharma
    Ransomware Autorità di Sistema Portuale del Mar Tirreno Settentrionale It id11258 View details Italy Public Sector
    Ransomware Elior UK id11257 View details United Kingdom Hospitality / Food & Beverage / Tourism
    Ransomware Desco Steel id11252 View details United States Manufacturing / Engineering
    Ransomware Metzger Veterinary Services id11251 View details Canada Healthcare / Pharma
    Ransomware Kenneth Young Center id11199 View details United States Communication / Marketing
    Ransomware Denninger’s id11141 View details United States Manufacturing / Engineering
    Ransomware Haivision MCS id11123 View details United States Public Sector
    Ransomware Tocci Building Corporation id11122 View details United States Construction / Real Estate
    Ransomware JVCKENWOOD id11121 View details Thailand Communication / Marketing
    Ransomware American Renal Associates id11120 View details United States Healthcare / Pharma
    Ransomware US #1364 Federal Credit Union id11119 View details United States Finance / Legal / Insurance
    Ransomware Paul Davis Restoration id11097 View details United States Construction / Real Estate
    Ransomware Veeco id11096 View details United States Manufacturing / Engineering
    Ransomware Prompt Financial Solutions id11088 View details Canada Communication / Marketing
    Ransomware Sophiahemmet University id11087 View details Sweden Education
    Ransomware Centennial Law Group LLP id11086 View details Canada Finance / Legal / Insurance
    Ransomware Eastern Rio Blanco Metropolitan id11085 View details United States Public Sector
    Ransomware Chris Argiropoulos Professional id11084 View details Canada Communication / Marketing
    Ransomware Stoney Creek Furniture id11077 View details Canada Retail / E-commerce
    Ransomware JS International id10999 View details United States Retail / E-commerce
    Ransomware Penn Cinema id10985 View details United States Transportation / Travel
    Ransomware Southwest Industrial Sales id10980 View details United States Manufacturing / Engineering
    Ransomware The Professional Liability Fund id10979 View details United States Communication / Marketing
    Ransomware Acorn id10946 View details United Kingdom Construction / Real Estate
    Ransomware Pressco Technology id10945 View details United States IT
    Ransomware Bimbo Bakeries id10899 View details Mexico IT
    Ransomware The Chas. E. Phipps id10884 View details United States Construction / Real Estate
    Ransomware Modern Kitchens id10794 View details United States Public Sector
    Ransomware Kadac Australia id10770 View details Australia Healthcare / Pharma
    Ransomware Amoskeag Network Consulting Group LLC id10768 View details United States Services
    Ransomware ArpuPlus id10696 View details Egypt IT
    Ransomware Digitel Venezuela id10656 View details Venezuela, Bolivarian Republic of Telecommunications
    Ransomware Galaxy Fireworks, Inc id10629 View details United States Retail / E-commerce
    Ransomware Kansas City Area Transportation Authority id10587 View details United States Public Sector
    Ransomware CloudFire Italy id10571 View details Italy IT
    Ransomware Signature Performance Insurance id10544 View details United States Finance / Legal / Insurance
    Ransomware Waldner's id10506 View details United States Public Sector
    Ransomware Pozzi Italy id10505 View details Italy Hospitality / Food & Beverage / Tourism
    Ransomware The Gainsborough Bath id10504 View details United Kingdom Services
    Ransomware Richmond Fellowship Scotland id10503 View details United Kingdom Communication / Marketing
    Ransomware Stone, Avant & Daniels id10449 View details United States Communication / Marketing
    Ransomware Limburg id10393 View details Belgium Public Sector
    Ransomware Water For People id10392 View details United States Communication / Marketing
    Ransomware ATCO Products Inc id10060 View details United States Communication / Marketing
    Ransomware Biomatrix LLC id10059 View details United States Healthcare / Pharma
    Ransomware Hinsdale School District id9959 View details United States Education
    Ransomware The Glendale Unified School District id9954 View details United States Education
    Ransomware Campbell County Schools id9877 View details Education
    Ransomware ACCU Reference Medical Lab id9871 View details United States Healthcare / Pharma
    Ransomware Sagent id9870 View details United States Services
    Ransomware Bowden Barlow Law PA id9850 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Rosens Diversified Inc id9849 View details United States Communication / Marketing
    Ransomware Chetu id9792 View details United States IT
    Ransomware Great Valley School District id9781 View details Education
    Ransomware Community Hospital id9669 View details Healthcare / Pharma
    Ransomware CENTRE D'AUTO P.R.N. SALABERRY IN id9611 View details Canada Communication / Marketing
    Ransomware McCray & Withrow id9610 View details United States Construction / Real Estate
    Ransomware Toyota Financial id9595 View details Japan Finance / Legal / Insurance
    Ransomware Moneris Solutions id9514 View details Canada Services
    Ransomware Hopewell Area School District id9422 View details Education
    Ransomware Weidmann & Associates id9401 View details United States Construction / Real Estate
    Ransomware Unimed Blumenau id9400 View details Brazil Healthcare / Pharma
    Ransomware Leaguers id9399 View details United States Communication / Marketing
    Ransomware Zon Beachside id9398 View details United States Public Sector
    Ransomware Canadian Psychological Association id9397 View details Canada NGOs / Associations
    Ransomware Software Systems id9331 View details United States IT
    Ransomware Mount Carmel Care Center id9292 View details Ireland Healthcare / Pharma
    Ransomware Jockey Club id9267 View details Argentina Communication / Marketing
    Ransomware Safpro id9186 View details United Kingdom Communication / Marketing
    Ransomware EHPAD id9185 View details France Healthcare / Pharma
    Ransomware Beaver Lake Cree Nation id9184 View details Canada Communication / Marketing