🏹 Medusa — Ransomware
Medusa is a ransomware-as-a-service operation active since June 2021 that has targeted over 300 victims across critical infrastructure sectors including healthcare, education, legal, and manufacturing using double-extortion, with attacks surging 42% between 2023 and 2024 and a formal CISA advisory issued in early 2025.
Classification
Ransomware
Leak-site victims
517
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (517)
| Victim | Country | Published | Domain |
|---|---|---|---|
| Comune di Battipaglia | IT | 2026-02-14T11:27:21.116152+00:00 | battipaglia.sa.it |
| MESA Products | US | 2026-02-14T11:26:51.765618+00:00 | mesaproducts.com |
| Grandview Family Medicine | US | 2026-02-14T11:27:06.950202+00:00 | grandviewfamilymedicine.com |
| South Hays Fire Department | US | 2026-02-14T11:27:35.275610+00:00 | southhaysfire.com |
| Balloons Everywhere | US | 2026-02-14T11:27:50.168304+00:00 | balloons.com |
| Resource Corporation of America | US | 2026-01-04T19:22:42.424005+00:00 | resourcecorp.com |
| JBS | US | 2025-12-28T08:00:45.564957+00:00 | — |
| Callipo Group | IT | 2025-12-19T18:09:04.769064+00:00 | callipogroup.it |
| Shamrock Technologies | US | 2025-12-19T18:09:18.687050+00:00 | shamrocktechnologies.com |
| Sampoerna Agro | ID | 2025-12-19T18:09:34.001879+00:00 | — |
| Thunder Bay Counselling | CA | 2025-12-19T18:09:49.133735+00:00 | thunderbaycounselling.ca |
| Concord Academy | US | 2025-11-30T17:57:10.988964+00:00 | concordacademy.org |
| WR Comercial | BR | 2025-11-30T17:57:30.737603+00:00 | wrcomercial.com.br |
| Universidade Municipal de São Caetano | BR | 2025-11-30T17:57:47.555747+00:00 | uscs.edu.br |
| Nationwide Legal LLC | US | 2025-11-21T18:43:50.157676+00:00 | nationwidelegal.com |
| MFE Formwork Technology | SG | 2025-11-21T18:44:04.985613+00:00 | mfeformwork.com |
| FDC Interiors | AE | 2025-11-21T18:44:19.416098+00:00 | fdc-interiors.com |
| General Distributing | US | 2025-11-21T18:44:34.798074+00:00 | generaldistributingcompany.com |
| Atrium Living Centers | US | 2025-11-09T18:42:58.778387+00:00 | atriumlivingcenters.com |
| PT Kalimantan Prima Persada | ID | 2025-11-07T18:29:43.381623+00:00 | pamapersada.com |
| Oscars Group | AU | 2025-11-07T18:30:14.422673+00:00 | oscarsgroup.com.au |
| LaRosa’s Pizzeria | US | 2025-11-07T18:30:34.192714+00:00 | — |
| Clackamas Community College | US | 2025-11-07T18:30:51.604929+00:00 | — |
| Simon Property Group | US | 2025-11-07T18:31:06.038357+00:00 | simon.com |
| Alissa Group | SA | 2025-10-27T11:04:41.656260+00:00 | alissa-group.com |
| Cooperativa Esercenti Farmacia Scrl | IT | 2025-10-27T11:04:57.345158+00:00 | cef.it |
| ATIRG | FR | 2025-10-27T11:05:13.538719+00:00 | atirg.fr |
| Adore Children and Family Services | US | 2025-10-27T11:05:32.080315+00:00 | adorechildren.org |
| DALCANS | FR | 2025-10-20T07:14:28.575277+00:00 | dalcans.fr |
| Linxx Global Solutions | US | 2025-10-20T07:14:45.246163+00:00 | linxxglobal.com |
| Imagicle | IT | 2025-10-20T07:15:01.337709+00:00 | imagicle.com |
| Cemtrex | US | 2025-10-14T08:08:09.958482+00:00 | cemtrex.com |
| EcoPetróleo | DO | 2025-10-14T08:08:24.136117+00:00 | ecopetroleo.do |
| Design To Print | US | 2025-10-14T08:08:38.846028+00:00 | printdaddy.com |
| LA VOIE EXPRESS | MA | 2025-10-14T08:08:52.704712+00:00 | lavoiexpress.ma |
| Leprohon (Image !) | 2025-10-14T08:09:07.816285+00:00 | — | |
| Lux Actuaries & Consultants | AE | 2025-10-08T09:08:08.505012+00:00 | luxactuaries.com |
| LGB | GB | 2025-10-04T10:32:02.111512+00:00 | — |
| Leprohon | CA | 2025-10-04T10:32:18.350920+00:00 | leprohon.com |
| Future Generali | IN | 2025-10-04T10:32:32.204261+00:00 | futuregenerali.in |
| Organon | US | 2025-10-04T10:33:01.594878+00:00 | organon.com |
| Comcast | US | 2025-10-04T10:33:17.481943+00:00 | comcast.com |
| CCMC | US | 2025-10-04T10:33:32.429069+00:00 | ccmcnet.com |
| Insightin Health | US | 2025-10-04T10:32:46.834367+00:00 | insightinhealth.com |
| Cariri | TT | 2025-09-13T18:06:29.618081+00:00 | cariri.com |
| Rad-Solutions, LLC | US | 2025-09-08T22:19:17.022261+00:00 | radsolutionsllc.com |
| TEAM GROUP | TH | 2025-09-03T04:22:27.752813+00:00 | teamgroup.co.th |
| Level | US | 2025-09-03T04:33:58.522603+00:00 | level.com |
| Aldagi | GE | 2025-08-27T13:43:16.350712+00:00 | aldagi.ge |
| Florarte | BR | 2025-08-20T13:36:32.288454+00:00 | florarte.com.br |
| PANSARD & ASSOCIES | FR | 2025-08-06T19:32:42.147239+00:00 | pansard-associes.com |
| White Coffee Corporation | US | 2025-08-02T09:10:50.238855+00:00 | whitecoffee.com |
| Franklin Pierce Schools | US | 2025-08-02T09:11:19.887287+00:00 | fpschools.org |
| Expert E-commerce GmbH | DE | 2025-08-20T13:36:47.534060+00:00 | expert.de |
| Prosecuting Attorneys' Council of Georgia | US | 2025-07-06T10:38:02.364470+00:00 | pacga.org |
| Southwest CARE Center | US | 2025-07-06T10:38:57.788951+00:00 | southwestcare.org |
| Sun Direct | IN | 2025-07-06T10:39:24.563745+00:00 | sundirect.in |
| R&W Engineering | US | 2025-07-06T10:39:52.976294+00:00 | rweng.com |
| San Jose Country Club | US | 2025-06-09T20:48:04.959316+00:00 | sanjosecountryclub.org |
| Hartwig Mechanical Inc | US | 2025-06-09T20:48:31.826615+00:00 | hartwigmechanical.com |
| Bumfords | GB | 2025-06-09T20:49:05.557548+00:00 | bumfords.co.uk |
| RE/MAX | US | 2025-06-01T00:42:27.460437+00:00 | remax.com |
| Presort First Class | US | 2025-06-01T00:43:48.285140+00:00 | presortfirstclass.com |
| Bailey's | US | 2025-06-01T00:44:55.675993+00:00 | baileyscss.com |
| DSI Tech | US | 2025-05-18T16:25:33.617225+00:00 | dsitech.com |
| Town of North Providence Rhode Island corporate office | US | 2025-06-01T00:41:17.692724+00:00 | northprovidenceri.gov |
| DeVita & Associates, Inc. | US | 2025-05-14T05:29:19.833093+00:00 | devitainc.com |
| Nottingham Construction | GB | 2025-05-14T05:30:27.702036+00:00 | nottinghamconstruction.net |
| Trindel Insurance Fund | US | 2025-05-14T05:31:02.606884+00:00 | trindel.org |
| Russell Child Development Center | US | 2025-05-09T17:44:08.122889+00:00 | rcdc4kids.org |
| Lake Shore Paving | US | 2025-05-09T17:45:13.912772+00:00 | lakeshorepaving.com |
| Weil Construction, Inc | US | 2025-05-01T14:54:27.996659+00:00 | weilconstruction.com |
| Conditioned Air Corporation | US | 2025-04-27T17:09:34.268515+00:00 | conditionedair.com |
| Phelps United | US | 2025-04-27T17:10:10.108903+00:00 | phelpsunited.com |
| Matthews Law | US | 2025-04-27T17:10:46.528476+00:00 | matthewslaw.co.nz |
| MRC de Maskinongé - district | CA | 2025-04-20T07:20:50.553033+00:00 | — |
| Lithium Americas Nevada | US | 2025-04-20T07:21:59.606026+00:00 | lithiumamericas.com |
| Pawnee Heights Unified School District | US | 2025-04-16T08:21:09.011310+00:00 | phtigers.net |
| Appalachian Regional Commission | US | 2025-04-27T17:08:59.153255+00:00 | arc.gov |
| Pulse Urgent Care | US | 2025-04-13T20:15:02.171422+00:00 | pulseurgentcare.com |
| Bridgebank Limited | GB | 2025-04-13T20:16:14.403538+00:00 | bridgebanklimited.co.uk |
| McFarland Commercial Insurance Services | US | 2025-04-13T20:17:25.501447+00:00 | mcfarlandinsurance.com |
| Fall River Public Schools | US | 2025-04-13T20:12:36.526487+00:00 | fallriverschools.org |
| National Association for Stock Car Auto Racing | US | 2025-04-13T20:13:47.313536+00:00 | nascar.com |
| FS Tool Corporation | CA | 2025-04-06T22:10:33.174922+00:00 | fstoolcorp.com |
| Krypton Solutions | US | 2025-04-06T22:11:47.709475+00:00 | fstoolcorp.com |
| O'Shea Builders | US | 2025-03-29T16:32:54.165909+00:00 | osheabuilders.com |
| Business Software Solutions | US | 2025-03-29T16:34:48.689496+00:00 | businesssoftwaresolutions.info |
| Family Health Services, Inc | US | 2025-03-29T16:36:02.042912+00:00 | fhsi.org |
| Advance Tapes International | GB | 2025-03-22T18:39:40.070842+00:00 | — |
| Big Horn County School District #4 | US | 2025-03-20T16:08:44.731842+00:00 | bgh4.org |
| J McCann & Co Ltd | GB | 2025-03-20T16:09:54.357299+00:00 | mccann-ltd.co.uk |
| Champions Group | IN | 2025-03-20T16:11:02.959045+00:00 | championsgroupholdings.com |
| Augusta Industrial Services, Inc. | US | 2025-03-20T16:12:14.975972+00:00 | augustaindustrial.com |
| National Safety Council | US | 2025-03-20T16:13:31.656057+00:00 | nsc.org |
| Coldwell Banker D’Ann Harper, REALTORS | US | 2025-03-16T20:30:36.270222+00:00 | cbharper.com |
| Portland Street Honda | CA | 2025-03-14T09:31:16.597091+00:00 | portlandstreethonda.com |
| CPI Books | GB | 2025-03-09T20:21:05.832442+00:00 | — |
| Customer Management Systems | US | 2025-03-09T20:21:39.321551+00:00 | dealershipphonetraining.com |
| Bell Ambulance | US | 2025-03-02T17:43:12.001532+00:00 | — |
| Karen S Pouliot | 2025-03-14T09:30:03.387953+00:00 | tpacpafirm.com | |
| City of Aurora | US | 2025-03-01T20:27:47.436338+00:00 | auroragov.org |
| Kable Product Services | US | 2025-03-01T20:29:01.183500+00:00 | kablefulfillment.com |
| Friendship House | US | 2025-02-25T19:56:46.184561+00:00 | friendshiphousede.org |
| Mundelein Park & Recreation District | US | 2025-02-25T19:57:53.929064+00:00 | mundeleinparks.org |
| Laurens School District 56 | US | 2025-02-25T19:59:05.958604+00:00 | lcsd56.org |
| Heartland Health Center | US | 2025-02-25T20:00:14.373070+00:00 | heartlandhealthcenter.org |
| Aurora Boardworks | US | 2025-02-25T20:01:30.919116+00:00 | auroraboardworks.com |
| Benton Police Department | US | 2025-02-22T17:48:41.606935+00:00 | bentonpolice.org |
| G&S Electric LLC | US | 2025-02-22T17:50:59.655068+00:00 | g-selectric.com |
| Martin Energy Group Services | US | 2025-02-22T17:54:22.431788+00:00 | martinenergygroup.com |
| HCRG Care Group | GB | 2025-02-20T10:03:09.653455+00:00 | hcrgcaregroup.com |
| Crager LaBorde | US | 2025-02-20T10:04:17.475697+00:00 | cragercpa.com |
| Robinson Family Dentistry | US | 2025-02-20T10:05:28.920277+00:00 | hanahanfamilydentistry.com |
| Central District Health Department | US | 2025-02-12T23:39:07.327230+00:00 | cdhd.ne.gov |
| JP Express | US | 2025-02-12T23:40:21.957742+00:00 | myjpexpress.com |
| Cache Valley ENT | US | 2025-02-12T23:41:34.266231+00:00 | cachevalleyent.com |
| Paignton Zoo | GB | 2025-02-11T15:52:51.008921+00:00 | paigntonzoo.org.uk |
| MEDES College | CA | 2025-02-10T14:16:17.434180+00:00 | medescollege.ca |
| Brockway Hair Design | US | 2025-02-10T14:18:36.386152+00:00 | brockwayhairdesign.com |
| Greenwich Medical Spa | US | 2025-02-10T15:55:31.346523+00:00 | greenwichmedicalspa.com |
| Michael’s Hair Body Mind | CA | 2025-02-10T15:56:39.459324+00:00 | michaelshbm.com |
| Serenity Salon & Spa | US | 2025-02-10T15:57:48.200714+00:00 | serenitysalonandspaaz.com |
| PAD Aviation Technics GmbH | DE | 2025-02-10T15:58:56.462336+00:00 | aviation-technics.com |
| Adler Shine LLP | GB | 2025-02-10T16:01:33.413675+00:00 | adlershine.com |
| SRP Companies (Second lock! + Company scam!) | US | 2025-03-16T20:31:50.245961+00:00 | srpcompanies.com |
| SRP Companies | US | 2025-02-11T15:51:38.072474+00:00 | srpcompanies.com |
| Rural Health Services | US | 2025-02-10T16:02:41.565715+00:00 | ruralhs.org |
| Grail Springs Retreat | CA | 2025-02-10T16:03:49.637725+00:00 | grailsprings.com |
| Glow Medi Spa | CA | 2025-02-10T14:14:39.275484+00:00 | glowmedispa.ca |
| Fayez Spa | CA | 2025-01-31T18:47:29.745021+00:00 | fayezspa.com |
| Beauty Works Spa | CA | 2025-01-31T18:44:15.996462+00:00 | beautyworksspa.com |
| Trimaco | US | 2025-01-31T18:44:06.024523+00:00 | trimaco.com |
| Natures Organics | AU | 2025-02-11T15:54:02.205778+00:00 | naturesorganics.com.au |
| Miles Industries | GB | 2025-01-29T08:50:23.877192+00:00 | milesindustries.com |
| Addison Saws | GB | 2025-01-29T08:50:15.735802+00:00 | addisonsaws.co.uk |
| English Braids | GB | 2025-01-29T08:50:08.079736+00:00 | englishbraids.com |
| Aden Footwear | CA | 2025-01-29T08:49:59.544288+00:00 | adenfootwear.ca |
| NG Automatics | GB | 2025-01-29T08:49:50.724036+00:00 | ngautomatics.co.uk |
| Philip Laney & Jolly | GB | 2025-01-29T08:49:43.084222+00:00 | plandj.co.uk |
| ARDEX Australia | AU | 2025-01-29T08:49:31.817288+00:00 | ardexaustralia.com |
| True World Foods | US | 2025-02-10T14:17:25.809468+00:00 | trueworldfoods.com |
| SimonMed Imaging | US | 2025-02-10T16:00:08.660884+00:00 | simonmed.com |
| Berman Brothers | US | 2025-01-24T07:46:00.382435+00:00 | bermanbros.com |
| Chappell Schools | US | 2025-01-24T07:45:53.930325+00:00 | chappellschools.com |
| Dolmor Salon | CA | 2025-01-31T18:46:15.160886+00:00 | dolmor.com |
| D & M Trim | US | 2025-01-20T09:18:58.185138+00:00 | dmtriminc.com |
| Delta Fabrication and Machine, Inc | US | 2025-01-20T09:16:58.185138+00:00 | deltafab.net |
| Hospital El Cruce | AR | 2025-01-24T07:45:43.689884+00:00 | hospitalelcruce.org |
| Safco International Gen Trading | AE | 2025-01-24T07:45:48.668655+00:00 | safcointl.com |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
📁 Case Management
🏹 Campaigns & malware
🏹 Add to case
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron