Ransomware Group intelligence

Medusa

Inactive

Track Medusa with 518 published victims and 10 known leak locations in a single intelligence view.

Victims 518 Known published victims in this dataset
First discovered 2023-01-11 Earliest victim discovery date
Last discovered 2026-02-14 Latest victim discovery date
Inactive since 154 days Days since the latest known victim
Top country United States 263 victims
Known locations 10 Leak or negotiation infrastructure tracked

Overview

Medusa is tracked by Breach House as a ransomware group with 518 published victims.

United States is currently the most targeted country in this dataset.

10 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (10)

    Label Type Availability Links
    Leak location 1 Onion service Unknown medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onion
    Leak location 2 Onion service Unknown medusakxxtp3uo7vusntvubnytaph4d3amxivbggl3hnhpk2nmus34yd.onion
    Leak location 3 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 4 Onion service Unknown dlmfciajg5s4vliyo5dhs5jyzhi2xr2fnkebul46lpf4xudtqiue4nid.onion
    Leak location 5 Onion service Unknown kyfiw76eol6ph2mq7pi5e5tdvce37bicddhai62qhdc5ja6jdchz4qqd.onion
    Leak location 6 Onion service Unknown s7lmmhlt3iwnwirxvgjidl6omcblvw2rg75txjfduy73kx5brlmiulad.onion
    Leak location 7 Web location Unknown 45.9.148.39
    Leak location 8 Onion service Unknown cx5u7zxbvrfyoj6ughw76oa264ucuuizmmzypwum6ear7pct4yc723qd.onion
    Leak location 9 Onion service Unknown xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
    Leak location 10 Onion service Unknown hupxs7ps7md24kpz4lwsbra64abgxjx3pcc2wuca5ibawf2g5hlpfyqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (518)

    Search, filter and paginate the victim timeline for Medusa. Showing 501–518 of 518.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Moose, Martin, Haynes & Lundy id5512 View details Services
    Ransomware International Center of Photography id5491 View details Services
    Ransomware AP Emissions Technologies id5467 View details United States IT
    Ransomware Foamtec International id5454 View details IT
    Ransomware PetroChina Indonesia id5448 View details Indonesia Energy
    Ransomware Eureka Casino Resort id5438 View details Hospitality / Food & Beverage / Tourism
    Ransomware Tonga Communications id5396 View details Tonga Communication / Marketing
    Ransomware Diethelm Keller Aviation Pte Ltd id5392 View details Singapore Transportation / Travel / Logistics
    Ransomware Elektro Richter id5355 View details Germany Manufacturing / Engineering
    Ransomware Elim Clinic id5354 View details South Africa Healthcare / Pharma
    Ransomware PFA Systems id5353 View details Communication / Marketing
    Ransomware EnCom id5352 View details Manufacturing / Engineering
    Ransomware European Window id5334 View details Australia Energy
    Ransomware Bank of Africa id5318 View details Senegal Finance / Legal / Insurance
    Ransomware EightPixelsSquare id5289 View details United Kingdom Communication / Marketing
    Ransomware Aglobis id5270 View details Communication / Marketing
    Ransomware Integerity Tax id5223 View details Finance / Legal / Insurance
    Ransomware Grace Church International id5224 View details Communication / Marketing