About
Aggregated threat-intel descriptionMedusa is a ransomware-as-a-service operation active since June 2021 that has targeted over 300 victims across critical infrastructure sectors including healthcare, education, legal, and manufacturing using double-extortion, with attacks surging 42% between 2023 and 2024 and a formal CISA advisory issued in early 2025.
Sectors: Business Services, Healthcare, Manufacturing · Countries: US, GB, CA
Recent victims
View all →| Victim | Sector | Country | Posted | Status |
|---|---|---|---|---|
| Millensys | Technology | BR | Oct 5, 2026 | |
| Rueegseggerag | Not Found | CH | Oct 5, 2026 | |
| PKSF — Palli Karma-Sahayak Foundation | Financial Services | BD | Sep 28, 2026 | |
| Juntadeandalucia | Government & Defense | ES | Sep 28, 2026 | |
| Premiumfruits | Agriculture and Food Production | ES | Sep 28, 2026 | |
| ATCO Ltd | Energy & Utilities | CA | Sep 28, 2026 | |
| Aokkef | Not Found | FR | Sep 23, 2026 | |
| Seznam | Technology | CZ | Sep 23, 2026 | |
| Abv | Other | BG | Sep 23, 2026 | |
| 瑞祥机电 (Ruixiang Jidian) | Manufacturing | CN | Sep 12, 2026 | |
| Abourametals | Manufacturing | AE | Sep 12, 2026 | |
| Frisby Roofing (Frisby Construction LLC) | Other | US | Sep 12, 2026 | |
| Praveg Caves Jawai | Hospitality | IN | Sep 12, 2026 | |
| Licindia | Other | IN | Sep 2, 2026 | |
| Lawter | Manufacturing | US | Sep 1, 2026 | |
| Jgsee | Not Found | TH | Aug 27, 2026 | |
| Servifruit | Agriculture and Food Production | MX | Aug 27, 2026 | |
| Hungry Lion | Retail & E-Commerce | GH | Aug 27, 2026 | |
| Qualisteel | Manufacturing | Aug 27, 2026 | ||
| Health | Healthcare | AU | Aug 27, 2026 | |
| Twal Family IT Lab | Technology | Aug 16, 2026 | ||
| All Parts Dry Cleaning | Retail & E-Commerce | GB | Aug 16, 2026 | |
| Idex Group | Technology | DE | Aug 16, 2026 | |
| Bija Industrie | Manufacturing | FR | Aug 16, 2026 | |
| Thecourierguy | Transportation | ZA | Aug 16, 2026 |