Medusalocker

Forces.gc.ca is the official website of the Canadian Armed Forces, providing information on the military's role, operations, and services in Canada. The Canadian Armed Forces operate within the public sector, offering various services and support to the country. Forces.gc.ca was listed as a ransomware victim associated with MedusaLocker. ID 30308

Organization with 28 emails extracted. Domain: ***.gc.ca ID 30308

Estrela.ind is a company based in Brazil, operating in the agriculture and food sector. The company likely provides products or services related to food production or distribution. Estrela.ind was listed as a ransomware victim associated with MedusaLocker. ID 30168

Organization with 11 emails extracted. Domain: estrela.ind ID 30168

Karneslegal.com is a US-based company operating in the finance and legal sector, offering services to clients. The company is located in the United States and provides legal and financial expertise to its customers. Karneslegal.com was listed as a ransomware victim associated with MedusaLocker ID 30169

Organization with 23 emails extracted. Domain: karneslegal.com ID 30169

SGS-GmbH is a German company operating in the manufacturing and engineering sector, providing various services and solutions to its clients. The company is based in Germany and offers a range of products and services related to its sector. SGS-GmbH was listed as a ransomware victim associated with MedusaLocker. ID 30170

Organization with 933 emails extracted. Domain: sgs-gmbh.com ID 30170

Dadolighting.com is a company operating in the manufacturing and engineering sector, based in the United States. The company likely provides various products and services related to lighting solutions, given its name. Dadolighting.com is involved in the production and distribution of lighting products, catering to different industries. It was listed as a ransomware victim associated with MedusaLocker ID 30171

Organization with 17 emails extracted. Domain: dadolighting.com ID 30171

T-online.de is a German telecommunications company that provides internet and telephone services to individuals and businesses in Germany. The company operates in the telecommunications sector, offering a range of services including broadband internet, mobile phone plans, and television packages. T-online.de is a well-established brand in Germany, providing essential services to millions of customers. It was listed as a ransomware victim associated with medusalocker ID 30172

Organization with 823 emails extracted. Domain: t-online.de ID 30172

FunkeScheid.com is an IT company based in Germany, providing various IT services. The company operates in the IT sector, offering its services to clients in the region. FunkeScheid.com was listed as a ransomware victim associated with medusalocker ID 30173

Notarkanzlei FunkeScheid, Kanzlei im Ostend, Frankfurt. 9755 emails. AD: Kanzlei.FunkeScheid.com ID 30173

Mairie Thiverval Grignon is a local government office in France, providing various public services to its community. As a public sector entity, it plays a vital role in the administration and governance of the local area. Mairie Thiverval Grignon is listed as a ransomware victim associated with MedusaLocker ID 30174

Organization with 162 emails extracted. Domain: mairie-thiverval-grignon.fr ID 30174

Dolrad ae operates in the construction and real estate sector in the United Arab Emirates, providing various services to clients. The company is involved in development and management of properties. Dolrad ae was listed as a ransomware victim associated with MedusaLocker ID 30175

Organization with 69 emails extracted. Domain: dolrad.ae ID 30175

The Building Department of the Canton of Zurich, bd.zh.ch, is a public sector entity responsible for construction and infrastructure projects in the Canton of Zurich, Switzerland. It provides various services related to building permits, construction supervision, and urban planning. bd.zh.ch was listed as a ransomware victim associated with medusalocker ID 30176

Organization with 772 emails extracted. Domain: bd.zh.ch ID 30176

pdscl.org operates within the IT sector in Canada, providing various services. The organization is involved in activities related to its sector. pdscl.org was listed as a ransomware victim associated with medusalocker ID 30177

Canadian charity providing disability-related services. CRA Registration: 119090686RR0001 | Penticton, British Columbia, Canada ID 30177

MLM / health & beauty products company. ~16k emails extracted. ID 29024

Brazilian supermarket chain. ID 29025

Australian auto parts/batteries importer. Brands: Strategic Imports, Auto Parts Now, Discount Batteries Now. User: bstuart (Brad Stuart). QNAP NAS (CACHEDEV1_DATA). ID 29026

Israeli jewelry company. Silver & accessories, participates in Vicenza jewelry fair (2025/2026). Sells via buyme.co.il gift cards. ~38k files, invoices in Hebrew (SI/IN/OV prefix). ID 29027

Technology company Trimble (trimble.com) and Gerrard Inc (gerrardinc.com). ~18 Trimble email addresses. ID 29028

Civil engineering & land surveying firm. Services: site plans, boundary surveys, OWTS (septic) design, fire line design, elevation certificates, flood plain analysis. Clients in Las Animas County, Pueblo County, Florence CO area. ID 29029

Italian company SIT Group (sitgroup.it) and Bulgarian Robusta (robusta.bg). Also abv.bg emails. ID 29030

K-12 Christian school affiliated with First Baptist Church of Lancaster, CA. ADP payroll, DCFS childcare program, City of Lancaster Water Safety program. Financial docs: P&L, Balance Sheet, Trial Balance, 1099s. School Board minutes 2025. ID 29031

Court technology company. Domain courtsmart.com / COURTSMART2. Dev server: dev-rich20.courtsmart.com. Connections to JIS.org, nashville.org. ID 29032

Personal comprehensive reports. Individuals: Noel Ray Hathcock, Trinity John Hathcock. ID 29033

NGO sector. Domains: actionaid.org, tacosa.org.za, immigration.go.tz. ID 29034

Australian international removals & relocation company. FIDI accredited, ISO 9001:2015 certified. Services: household moves, storage, customs, immigration (IMMI/VEVO). Operates Melbourne area (Pascoe Vale, Dandenong, Caulfield). ID 29035

French public school network. Domain CSJM.BEZIERS, part of Académie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teacher and admin staff credentials. ID 29036

Catholic school in Moravia, Costa Rica. Domain cmi.local / mariainmaculada.ed.cr. Servers: CMI-DC01, CMI-APP, CMI-HTTP2, main-server1/2. ID 29037

Brazilian produce wholesale market network. Domain netfeirasp.ceagesp (CEAGESP). Also demarchibrasil.com.br accounts. ID 29038

Organization with 2 emails extracted. Domain: raycolighting.com ID 29039

Price-$40000 (sale in one hand there are options for making a profit from these files will be included in the deal) 500Gb ID 23957

Price-$120000 (sale in one hand there are options for making a profit from these files will be included in the deal) ID 22359

Looking for pentesters is an Other-sector listing identified in threat-intelligence coverage as a MedusaLocker target. Public reporting describes MedusaLocker as a ransomware group that posted a recruitment-style notice on its leak site seeking pentesters with direct access to corporate networks, including environments such as ESXi, Windows, and ARM systems. The available reporting does not establish a formal corporate profile, offering set, or geographic location for this entity beyond the listing context. It was listed as a ransomware victim associated with medusalocker. ID 21590

www.unigaz.net $690.6 Million The list of files is available at the link https://dropmefiles.com/9HGAJ ID 20337

www.muliaraya.co.id $34.8 Million The list of files is available at the link https://dropmefiles.com/lAZQo ID 20305

www.curtainbluff.com Curtain Bluff files Vacationer information (personal data), audit information (including past years), bank activity (statements with all transactions), internal organization documentation (even the menu) and other documents.There are also large amounts of account data (about 500 unique login/password pairs). Price – $120,000 ID 18702

www.clinicameta.co Description employee information – patient information – agreements – password data – appointment information Sold with 1-day access Price-$100000 (sale in one hand there are options for making a profit from these files will be included in the deal) ID 18092

Micro Manufacturing Inc. Descriptionemployee information – agreement – customer email(.xls)-.msg outlook files. password data\\ Sold with 1-day access Price-$120000 (sale in one hand there are options for making a profit from these files will be included in the deal ID 17454

Descriptionemployee information – agreement – customer email(.xls)-.msg outlook files Data-2016-2024 years Price-$50000 (sale in one hand there are options for making a profit from these files will be included in the deal ID 16545

URL:https://silknet.com https://geocell.ge/ On sale:Company email base(about 1tb)Customer dataCompany audit for 2023\24and more than 3tb of data. Price-$800000 There are a lot of corporate data, passports and other information. ID 15662

There is no excerpt because this is a protected post. ID 12401

Descriptionemployee information – agreement – customer email(.xls)-.msg outlook files Price-$50000 (sale in one hand there are options for making a profit from these files will be included in the deal) ID 12239

There is no excerpt because this is a protected post. ID 12147

There is no excerpt because this is a protected post. ID 9793

There is no excerpt because this is a protected post. ID 9786

Descriptionemployee information – student information – all contracts Price: 35000$ ID 9182

Descriptionemployee information – agreement – customer email(.xls)- pst files 15+GB all outlook message 2006-2023 year Price: 55000$ ID 9181

A large number of documents of large companies are available for sale Revenue-$10-$70kk Financial documents, client cases, passports, tax evasion and many other documents are in closed sale, please contact qtox to coordinate the sale ID 8933

Descriptionemployee information – agreement – customer email(.xls)- passport all canada and other documents Price: 35000$ ID 8032

There is no excerpt because this is a protected post. ID 7950

There is no excerpt because this is a protected post. ID 7335

DescriptionClient Case – agreement – email(.msg)- and other documents Price: 60000$ ID 7114

DescriptionClient Case – customers email-Audit information-There is also access to email for newsletters on behalf of the company PRICE-$80000 ID 7100

DescriptionClient Case – agreement – email(.msg)- contracts – and other documents PRICE-$80000 ID 7011

DescriptionClient Case – customers email-documents PRICE-$20000 ID 7010

DescriptionClient Case – agreement – email(outlook files)- contracts – and other documents PRICE-$50000 ID 7009

Available for sale: to buy please contact qtox price negotiable qtox-E9CD65687463F67F64937E961DD723DC82C79CB548375AAE8AA4A0698D356C5E7E157B22E8CD ID 7008

DescriptionClient Case – agreement – email(.msg) – and other documents Price: 160000$The company failed to take care of the data leak and therefore ,many contracts and other documents have been leaked to the Internet.We are also going to provide any documents related to the aforementioned company if any law enforcement agency should request it ID 6855

DescriptionClient Case – agreement – email(.msg)- and other documents Price: 60000$ One copy will be sold, confidential informationThe company did not take care of the data leak, and therefore we will sell many contracts, customer data, financial component and other documentsin one lot for $ 60,000 for verification in the darknet or bank ID 6854

DescriptionClient Case – agreement – email(.msg)- passport- and other documents Price: 120000$ Three copies will be sold, confidential informationThe company failed to take care of the data leak and therefore ,many contracts and other documents have been leaked to the Internet.Other: contracts, agreements and other bank checks, we will sell everything in one lot for… Continue reading Salmon Software ID 6720

DescriptionClient Case – agreement – email(.msg)- contracts – and other documents(passports) PRICE-$40000 ID 6719

DescriptionClient Case – agreement – email(.msg)- contracts – and other documents PRICE-$80000 There are many projects, agreements and contracts that can be sold separately ID 6080

No additional victim description available. ID 4602

No additional victim description available. ID 4601

No additional victim description available. ID 4600

No additional victim description available. ID 4599

No additional victim description available. ID 4598

No additional victim description available. ID 4597

No additional victim description available. ID 4596

No additional victim description available. ID 4595

No additional victim description available. ID 4593

No additional victim description available. ID 4592

No additional victim description available. ID 4591

No additional victim description available. ID 4590

No additional victim description available. ID 4589

No additional victim description available. ID 4588

No additional victim description available. ID 4587

No additional victim description available. ID 4586

No additional victim description available. ID 4585

No additional victim description available. ID 4584

No additional victim description available. ID 4583

No additional victim description available. ID 4582