Medusa Ransomware Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
February 25, 2026
Last Seen
April 28, 2026

Related Threat Clusters

  • Ransomware Fuels Surge in Global Cyberattacks

    As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…

    1908 articles · Updated February 12, 2026
  • CareCloud Data Breach Exposes Patient Records Amid Cyberattack

    On March 16, 2026, CareCloud, a healthcare technology firm, experienced a cyberattack that led to unauthorized access to one of its electronic health record (EHR) environments. The breach caused a temporary disruption…

    19 articles · Updated March 31, 2026
  • North Korean Lazarus Group Targets US Healthcare with Medusa Ransomware

    Cybersecurity researchers have identified attacks utilizing Medusa ransomware, attributed to the Lazarus group, a North Korean state-backed hacking operation. These attacks are primarily targeting U.S. healthcare…

    20 articles · Updated February 24, 2026
  • North Korean Intruders Target US Education and Healthcare Sectors

    Digital intruders with possible links to North Korea have been infecting the US education and healthcare sectors with a new backdoor since at least December 2025. Security researchers from Cisco Talos reported that…

    2 articles · Updated February 28, 2026
  • ATT&CK v19 Release Introduces Major Changes in Defense Evasion Tactics

    The ATT&CK framework has released version 19, which includes significant updates to its structure and coverage. Notably, the Defense Evasion Tactic has been split into two distinct categories: Stealth and Defense…

    7 articles · Updated April 28, 2026

Recent Intelligence Reports

  • T1685: Disable or Modify Tools — attack.mitre.org · April 28, 2026
  • Storm-1175 focuses gaze on vulnerable web-facing assets in high — Blogs.Microsoft · April 6, 2026
  • CareCloud Data Breach Confirmed, Patient Records Potentially Exposed — Technadu · March 31, 2026
  • Suspected Nork digital intruders caught breaking into US healthcare, education orgs — Theregister · February 27, 2026
  • North Korean hackers deploy new malware to extort US health care sector — Nknews · February 25, 2026

CVSS v3.1 Breakdown