Ransomware Group intelligence

Medusa

Inactive

Track Medusa with 518 published victims and 10 known leak locations in a single intelligence view.

Victims 518 Known published victims in this dataset
First discovered 2023-01-11 Earliest victim discovery date
Last discovered 2026-02-14 Latest victim discovery date
Inactive since 154 days Days since the latest known victim
Top country United States 263 victims
Known locations 10 Leak or negotiation infrastructure tracked

Overview

Medusa is tracked by Breach House as a ransomware group with 518 published victims.

United States is currently the most targeted country in this dataset.

10 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (10)

    Label Type Availability Links
    Leak location 1 Onion service Unknown medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onion
    Leak location 2 Onion service Unknown medusakxxtp3uo7vusntvubnytaph4d3amxivbggl3hnhpk2nmus34yd.onion
    Leak location 3 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 4 Onion service Unknown dlmfciajg5s4vliyo5dhs5jyzhi2xr2fnkebul46lpf4xudtqiue4nid.onion
    Leak location 5 Onion service Unknown kyfiw76eol6ph2mq7pi5e5tdvce37bicddhai62qhdc5ja6jdchz4qqd.onion
    Leak location 6 Onion service Unknown s7lmmhlt3iwnwirxvgjidl6omcblvw2rg75txjfduy73kx5brlmiulad.onion
    Leak location 7 Web location Unknown 45.9.148.39
    Leak location 8 Onion service Unknown cx5u7zxbvrfyoj6ughw76oa264ucuuizmmzypwum6ear7pct4yc723qd.onion
    Leak location 9 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 10 Onion service Unknown hupxs7ps7md24kpz4lwsbra64abgxjx3pcc2wuca5ibawf2g5hlpfyqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (518)

    Search, filter and paginate the victim timeline for Medusa. Showing 401–500 of 518.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Native Counselling Services of Alberta id9183 View details Canada Services
    Ransomware ATI Traduction id9109 View details France Other
    Ransomware EDB id9108 View details Italy Communication / Marketing
    Ransomware Global Product Sales id9107 View details United States Retail / E-commerce
    Ransomware Symposia Organizzazione Congressi S.R.L id9106 View details NGOs / Associations
    Ransomware Believe Productions id9102 View details United States Manufacturing / Engineering
    Ransomware Neodata id9058 View details Spain Construction / Real Estate
    Ransomware Evasión id9057 View details Spain Communication / Marketing
    Ransomware SIMTA id9056 View details Italy Manufacturing / Engineering
    Ransomware ZOUARY & Associés id9055 View details Services
    Ransomware Agència Catalana de Notícies (ACN) id8985 View details Hospitality / Food & Beverage / Tourism
    Ransomware Somagic id8946 View details France Hospitality / Food & Beverage / Tourism
    Ransomware Windak id8931 View details United States Energy
    Ransomware Karam Chand Thapar & Bros Coal Sales id8929 View details India Retail / E-commerce
    Ransomware Acoustic Center id8871 View details Services
    Ransomware LANDSTAR POWER ONTARIO INC id8870 View details Energy
    Ransomware Franktronics, Inc id8757 View details United States IT
    Ransomware Philippine Health Insurance id8756 View details Philippines Healthcare / Pharma
    Ransomware Chait id8708 View details United States Services
    Ransomware Gulf American Lines id8707 View details United States Transportation / Travel / Logistics
    Ransomware Auckland Transport id8669 View details New Zealand Transportation / Travel / Logistics
    Ransomware Wave Hill id8571 View details United States Public Sector
    Ransomware Steripharma id8570 View details Morocco Healthcare / Pharma
    Ransomware Betton France id8463 View details France Public Sector
    Ransomware Jules B id8462 View details United Kingdom Retail / E-commerce
    Ransomware Aranui Cruises id8364 View details United States Public Sector
    Ransomware Skynet id8363 View details United States Telecommunications
    Ransomware LEN Italia id8299 View details Education
    Ransomware Durham Fasteners id8298 View details Canada Services
    Ransomware Axis Elevators id8297 View details United Kingdom Other
    Ransomware Novi Pazar put ad id8206 View details Serbia Manufacturing / Engineering
    Ransomware The International Civil Defense Organization id8205 View details NGOs / Associations
    Ransomware Sartrouville France id8204 View details France Public Sector
    Ransomware Postel SpA id8146 View details Italy IT
    Ransomware CB Energy Australlia id8131 View details Australia Energy
    Ransomware Borets (Levare.com) id8130 View details Manufacturing / Engineering
    Ransomware Avatier ida7105 View details United States Services
    Ransomware Emerson School District id8082 View details United States Education
    Ransomware Ace Micromatic Group id7976 View details India Communication / Marketing
    Ransomware St Landry Parish School Board id7975 View details Education
    Ransomware The Sinbad Club id7439 View details Egypt Services
    Ransomware Sun Pain Management id7415 View details United States Services
    Ransomware Cafe Britt id7414 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware DTD Express id7354 View details United Kingdom Communication / Marketing
    Ransomware Health Springs Medical Center id7350 View details Healthcare / Pharma
    Ransomware Nini Collection Ltd (Nini's Jewels) id7349 View details United States Public Sector
    Ransomware Tracker de Colombia SAS id7181 View details Communication / Marketing
    Ransomware Yunus Emre Institute Turkey id7113 View details Türkiye Education
    Ransomware Mutuelle LMP id7105 View details France Finance / Legal / Insurance
    Ransomware Luna Hotels & Resorts id7104 View details Portugal Hospitality / Food & Beverage / Tourism
    Ransomware Real Estate Systems Integrator id7016 View details United States Construction / Real Estate
    Ransomware Universitas Matthiae Belii association id7015 View details Slovakia Education
    Ransomware Praxis Energy Agents id6960 View details United States Energy
    Ransomware FHR Electric id6930 View details Services
    Ransomware Salem Community Schools id6877 View details Education
    Ransomware GAE Construction id6812 View details United Kingdom Construction / Real Estate
    Ransomware Comisión Nacional de Valores id6811 View details Argentina Finance / Legal / Insurance
    Ransomware Kramer Enterprises id6790 View details Communication / Marketing
    Ransomware Tour Partner Group id6782 View details United Kingdom Education
    Ransomware Farmacias Los Hidalgos id6743 View details Dominican Republic Agriculture / Food
    Ransomware Concremat constructions id6742 View details Brazil Construction / Real Estate
    Ransomware BilgeAdam Software id6665 View details IT
    Ransomware Fiduagraria id6658 View details Colombia Public Sector
    Ransomware Trabzonspor Football Club id6626 View details Türkiye Public Sector
    Ransomware Amaszonas S.A. id6597 View details Bolivia, Plurinational State of Transportation / Travel
    Ransomware Leland Campbell LLP law firm id6596 View details Finance / Legal / Insurance
    Ransomware Loreto Normanhurst id6493 View details Australia Education
    Ransomware SIGMA id6492 View details United States Services
    Ransomware Al Tamimi Law Firm id6474 View details United Arab Emirates Finance / Legal / Insurance
    Ransomware BAMSI id6444 View details Healthcare / Pharma
    Ransomware HostAfrica id6431 View details South Africa Communication / Marketing
    Ransomware Wallick Communities id6429 View details Construction / Real Estate
    Ransomware Cooperativa de Ahorro y Crédito Ahorrocoop Ltda id6391 View details Chile Finance / Legal / Insurance
    Ransomware Sonda (Duplicate with update) id6358 View details Chile Telecommunications
    Ransomware The Crown Princess Mary Cancer Centre id6334 View details Australia Communication / Marketing
    Ransomware Alto Calore Servizi S.p.A. id6305 View details Italy Communication / Marketing
    Ransomware Polat Yol Yap id6304 View details Construction / Real Estate
    Ransomware Bevan Group id6260 View details Communication / Marketing
    Ransomware Magnolia Care Center id6233 View details United States Public Sector
    Ransomware Bentham & Holroyd Ltd id6221 View details Manufacturing / Engineering
    Ransomware WestcoastSmile Dental Studio id6208 View details Jordan Healthcare / Pharma
    Ransomware Uniondale School District id6141 View details Education
    Ransomware Allimand, France id6132 View details France Communication / Marketing
    Ransomware Scantibodies Laboratory, Inc. id6064 View details Communication / Marketing
    Ransomware Atlantic International University id6045 View details United States Education
    Ransomware Open University of Cyprus id6034 View details Cyprus Education
    Ransomware Sonda id6002 View details Chile IT
    Ransomware Arandell Corp id5991 View details Communication / Marketing
    Ransomware Gujarat Mineral id5877 View details India Manufacturing / Engineering
    Ransomware Atlas Security id5804 View details South Africa Communication / Marketing
    Ransomware Law Firm Vazquez Nava Consultores y Abogados, S.C id5770 View details Mexico Finance / Legal / Insurance
    Ransomware National Institute of Ocean Technology id5746 View details India IT
    Ransomware LLPGroup id5701 View details Czechia Services
    Ransomware Bishop Luffa School id5690 View details United Kingdom Education
    Ransomware Garbarino SAICeI id5634 View details Argentina Hospitality / Food & Beverage / Tourism
    Ransomware National Business Furniture id5633 View details Services
    Ransomware Minneapolis Public Schools id5590 View details Education
    Ransomware The Institute of Space Technology id5584 View details Pakistan IT
    Ransomware Kenya Airports Authority id5553 View details Kenya Transportation / Travel
    Ransomware RAYAB Consulting Engineers id5513 View details Iran, Islamic Republic of Services