About
Aggregated threat-intel descriptionMedusa is a ransomware-as-a-service operation active since June 2021 that has targeted over 300 victims across critical infrastructure sectors including healthcare, education, legal, and manufacturing using double-extortion, with attacks surging 42% between 2023 and 2024 and a formal CISA advisory issued in early 2025.
Sectors: Business Services, Healthcare, Manufacturing · Countries: US, GB, CA
Recent victims
View all →| Victim | Sector | Country | Posted | Status |
|---|---|---|---|---|
| Licindia | Other | IN | Sep 2, 2026 | |
| Lawter | Manufacturing | US | Sep 1, 2026 | |
| Jgsee | Not Found | TH | Aug 27, 2026 | |
| Servifruit | Agriculture and Food Production | MX | Aug 27, 2026 | |
| Hungry Lion | Retail & E-Commerce | GH | Aug 27, 2026 | |
| Qualisteel | Manufacturing | Aug 27, 2026 | ||
| Health | Healthcare | AU | Aug 27, 2026 | |
| Twal Family IT Lab | Technology | Aug 16, 2026 | ||
| All Parts Dry Cleaning | Retail & E-Commerce | GB | Aug 16, 2026 | |
| Idex Group | Technology | DE | Aug 16, 2026 | |
| Bija Industrie | Manufacturing | FR | Aug 16, 2026 | |
| Thecourierguy | Transportation | ZA | Aug 16, 2026 | |
| Forces | Not Found | CA | Jul 7, 2026 | |
| Estrela | Consumer Services | BR | Jul 1, 2026 | |
| Karneslegal | Business Services | Jul 1, 2026 | ||
| Sgs Gmbh | Business Services | DE | Jul 1, 2026 | |
| Dadolighting | Manufacturing | Jul 1, 2026 | ||
| T Online | Charity | DE | May 11, 2026 | |
| FunkeScheid | Manufacturing | DE | Jul 1, 2026 | |
| Mairie Thiverval Grignon | Academia | FR | Jul 1, 2026 | |
| Dolrad | Not Found | AE | Jul 1, 2026 | |
| Bd | Healthcare | CH | Jul 1, 2026 | |
| Penticton and District Society for Community Living | Healthcare | CA | Jul 1, 2026 | |
| Balloons Everywhere | Consumer Services | US | Feb 14, 2026 | |
| South Hays Fire Department | Public Sector | US | Feb 14, 2026 |