Ransomware Group intelligence
MEDUZA LOCKER
ActiveTrack MEDUZA LOCKER with 7 published victims and 1 known leak locations in a single intelligence view.
Overview
MEDUZA LOCKER is tracked by Breach House as a ransomware group with 7 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Leak Status Distribution
- Leaked 0 0.0%
- Pending 7 100.0%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 1h ago | 5tqdhriujqb7tb3cw3i3ffwaamjtnph6wsijdbecscyqhii3jbjz2rqd.onion |
Top Activity Sectors (2)
- IT 5
- Not identified 1
Victims (7)
Search, filter and paginate the victim timeline for MEDUZA LOCKER. Showing 1–7 of 7.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | gsgroup.co id34159 View details | Guyana | — | pending | ||
|
gsgroup.co $15,000 Work documents, contracts, passports, and banking information. 300GB of data. Password required to view test document... https://9tyAws.short.gy/K5iPKM Read more March 3, 2026 |
||||||
| Ransomware | rene.co.ug id34160 View details | Guyana | Other | pending | ||
|
rene.co.ug $60,000 rene.co.ug A lot of confidential information. Password for viewing test files 4TQJPyOpHTLIHIpgD4t1 https://9tyAws.short.gy/ Read more — |
||||||
| Ransomware | kelseyschooldivision.ca id34161 View details | United States | IT | pending | ||
|
kelseyschooldivision.ca $40,000 kelseyschooldivision.ca Documents for students, parents, staff, and sponsors. Bank transfers and more. Password for v... https://bit.ly/496t55p Read more — |
||||||
| Ransomware | Taiwan Hospital id34162 View details | United States | IT | pending | ||
|
Taiwan Hospital $70,000 Taiwan Hospital A large number of personal documents of the clinic's clients, including personal files, addresse... https://bit.ly/4avljVd Read more — |
||||||
| Ransomware | powerscourt.com id34163 View details | United States | IT | pending | ||
|
powerscourt.com $35,000 powerscourt.com A lot of private information, bank transfers, clients, passports, and documents. Password required to... https://bit.ly/4pUkcmN Read more — |
||||||
| Ransomware | teknequip.com id34164 View details | United States | IT | pending | ||
|
teknequip.com $30,000 teknequip.com Contracts, projects, banking documents. Password for viewing test files PPRp4yE5e3KZhqJMCodZ https://bit.ly/3MJAhNz Read more — |
||||||
| Ransomware | voltechrebuilders.com id34165 View details | United States | IT | pending | ||
|
voltechrebuilders.com $40,000 voltechrebuilders.com There are many documents. Password to view test files - cdiNfCOfnAWWWScXzIOM https://bit.ly/4s9MUS7 Read more — |
||||||