medusalocker
First seen November 15, 2022Active103 claimed victims
The claims below are reproduced as posted by medusalocker on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Medusa is a DDoS bot written in .NET 2.0. In its current incarnation its C&C protocol is based on HTTP, while its predecessor made use of IRC.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Rueegseggerag | October 5, 2026 | ransomware_live | — |
| Millensys | October 5, 2026 | ransomware_live | — |
| ATCO Ltd | September 28, 2026 | ransomware_live | — |
| Premiumfruits | September 28, 2026 | ransomware_live | — |
| Juntadeandalucia | September 28, 2026 | ransomware_live | — |
| PKSF — Palli Karma-Sahayak Foundation | September 28, 2026 | ransomware_live | — |
| Abv | September 23, 2026 | ransomware_live | — |
| Seznam | September 23, 2026 | ransomware_live | — |
| Aokkef | September 23, 2026 | ransomware_live | — |
| Praveg Caves Jawai | September 12, 2026 | ransomware_live | — |
| Frisby Roofing (Frisby Construction LLC) | September 12, 2026 | ransomware_live | — |
| Abourametals | September 12, 2026 | ransomware_live | — |
| 瑞祥机电 (Ruixiang Jidian) | September 12, 2026 | ransomware_live | — |
| Licindia | September 2, 2026 | ransomware_live | — |
| Lawter | September 1, 2026 | ransomware_live | — |
| Health | August 27, 2026 | ransomware_live | — |
| Qualisteel | August 27, 2026 | ransomware_live | — |
| Hungry Lion | August 27, 2026 | ransomware_live | — |
| Servifruit | August 27, 2026 | ransomware_live | — |
| Jgsee | August 27, 2026 | ransomware_live | — |
| Thecourierguy | August 16, 2026 | ransomware_live | — |
| Bija Industrie | August 16, 2026 | ransomware_live | — |
| Idex Group | August 16, 2026 | ransomware_live | — |
| All Parts Dry Cleaning | August 16, 2026 | ransomware_live | — |
| Twal Family IT Lab | August 16, 2026 | ransomware_live | — |
| Forces | July 7, 2026 | ransomware_live | — |
| Penticton and District Society for Community Living | July 1, 2026 | ransomware_live | — |
| Bd | July 1, 2026 | ransomware_live | — |
| Dolrad | July 1, 2026 | ransomware_live | — |
| Mairie Thiverval Grignon | July 1, 2026 | ransomware_live | — |
| FunkeScheid | July 1, 2026 | ransomware_live | — |
| T Online | July 1, 2026 | ransomware_live | — |
| Dadolighting | July 1, 2026 | ransomware_live | — |
| Sgs Gmbh | July 1, 2026 | ransomware_live | — |
| Karneslegal | July 1, 2026 | ransomware_live | — |
| Estrela | July 1, 2026 | ransomware_live | — |
| Raycolighting | May 5, 2026 | ransomware_live | — |
| CEAGESP / Netfeirasp | May 5, 2026 | ransomware_live | — |
| Colegio María Inmaculada (CMI) | May 5, 2026 | ransomware_live | — |
| Académie de Montpellier / CSJM | May 5, 2026 | ransomware_live | — |
| Palmers Relocations | May 5, 2026 | ransomware_live | — |
| ActionAid / TACOSA | May 5, 2026 | ransomware_live | — |
| Hathcock (Personal) | May 5, 2026 | ransomware_live | — |
| CourtSmart | May 5, 2026 | ransomware_live | — |
| Desert Christian Schools (DCS) | May 5, 2026 | ransomware_live | — |
| SIT Group / Robusta | May 5, 2026 | ransomware_live | — |
| Atencio Engineering | May 5, 2026 | ransomware_live | — |
| Magnolia (Israel) | May 5, 2026 | ransomware_live | — |
| Strategic Imports | May 5, 2026 | ransomware_live | — |
| Bandeirante Supermercados | May 5, 2026 | ransomware_live | — |
| Elken Sdn Bhd | May 5, 2026 | ransomware_live | — |
| dulay.ca | November 17, 2025 | ransomware_live | — |
| Trimble Inc / Gerrard Inc | November 7, 2025 | ransomware_live | — |
| usenergy | September 14, 2025 | ransomware_live | — |
| UnigazJordan | May 30, 2025 | ransomware_live | — |
| Mulia Raya | May 29, 2025 | ransomware_live | — |
| Curtain Bluff | March 25, 2025 | ransomware_live | — |
| Inversiones Clinica Del Meta SA | February 28, 2025 | ransomware_live | — |
| MICRO MANUFACTRING | February 5, 2025 | ransomware_live | — |
| bendixengineering | December 28, 2024 | ransomware_live | — |
| SILKNET COMPANY | November 26, 2024 | ransomware_live | — |
| Protected: HIDE NAME | May 9, 2024 | ransomware_live | — |
| Protected: HIDE NAME SELL DATA SOON | April 25, 2024 | ransomware_live | — |
| SHAMASS.ORG | April 22, 2024 | ransomware_live | — |
| skalar.com | November 29, 2023 | ransomware_live | — |
| Protected: Name is hidden | November 29, 2023 | ransomware_live | — |
| wellons.org | October 23, 2023 | ransomware_live | — |
| Ada-Borup-West School | October 23, 2023 | ransomware_live | — |
| Confidential files | October 2, 2023 | ransomware_live | — |
| Protected: INSULCANA CONTRACTING LTD | July 27, 2023 | ransomware_live | — |
| INSULCANA CONTRACTING LTD | July 27, 2023 | ransomware_live | — |
| Protected: Hidden name | July 17, 2023 | ransomware_live | — |
| Hoosier Equipment company | July 4, 2023 | ransomware_live | — |
| Ucamco Belgium | July 2, 2023 | ransomware_live | — |
| SELL DATA(qtox) | June 17, 2023 | ransomware_live | — |
| kafflogistic.hu | June 17, 2023 | ransomware_live | — |
| Hausamman company | June 16, 2023 | ransomware_live | — |
| reutlingen.ihk.de | June 16, 2023 | ransomware_live | — |
| arborsct.com | June 14, 2023 | ransomware_live | — |
| LETAPE JEUNES | June 2, 2023 | ransomware_live | — |
| bsw-architects.com | April 11, 2023 | ransomware_live | — |
| Dyatech company | November 15, 2022 | ransomware_live | — |
| BIOPLAN | November 15, 2022 | ransomware_live | — |
| Autosoft company | November 15, 2022 | ransomware_live | — |
| lawtrade company | November 15, 2022 | ransomware_live | — |
| MCCLEAN16 company | November 15, 2022 | ransomware_live | — |
| LEGAZPIBANK | November 15, 2022 | ransomware_live | — |
| Zelena Laguna Hotel | November 15, 2022 | ransomware_live | — |
| Fonderia Boccacci | November 15, 2022 | ransomware_live | — |
| ALTlTUDE AEROSPACE INC | November 15, 2022 | ransomware_live | — |
| archimages inc | November 15, 2022 | ransomware_live | — |
| atlantisholidays | November 15, 2022 | ransomware_live | — |
| tristatefabricators_inc | November 15, 2022 | ransomware_live | — |
| hwrpc.com | November 15, 2022 | ransomware_live | — |
| exheat.com | November 15, 2022 | ransomware_live | — |
| goldcreekfoods | November 15, 2022 | ransomware_live | — |
| fidelityunited.ae | November 15, 2022 | ransomware_live | — |
| AURIS KONINKLIJKE AURIS GROEP | November 15, 2022 | ransomware_live | — |
| MIDAS Company | November 15, 2022 | ransomware_live | — |
| emscrm | November 15, 2022 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).