// THREAT ACTOR
MEDUSA_
ActiveMedusa is a ransomware-as-a-service operation active since mid-2022, known for high-profile attacks against Toyota Financial Services, Minneapolis Public Schools, and several US municipalities. The group runs a public Telegram channel alongside its leak site, where it openly negotiates and pressures victims.
For Ransomnews editorial coverage of MEDUSA — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
537
Victims tracked
2 / 17
Active mirrors
2023-02-13
First listing
2026-04-26
Most recent
Victims by year
- 2026 28
- 2025 158
- 2024 208
- 2023 143
Leak site mirrors
17 mirrors tracked, 2 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onionHuman Verify snapshot · 2024-03-01 16:06 -
xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onionsnapshot · 2026-07-09 12:30 -
dlmfciajg5s4vliyo5dhs5jyzhi2xr2fnkebul46lpf4xudtqiue4nid.onion503 Service Temporarily Unavailable snapshot · 2024-06-03 21:02 -
kyfiw76eol6ph2mq7pi5e5tdvce37bicddhai62qhdc5ja6jdchz4qqd.onionHuman Verify snapshot · 2024-07-30 04:02 -
62foekhv5humjrfwjdyd2dgextpbf5i7obguhwvfoghmu3nxpkmxlcid.onionHuman Verify snapshot · 2024-07-15 15:01 -
cx5u7zxbvrfyoj6ughw76oa264ucuuizmmzypwum6ear7pct4yc723qd.onionsnapshot · 2025-11-12 09:05 -
hupxs7ps7md24kpz4lwsbra64abgxjx3pcc2wuca5ibawf2g5hlpfyqd.onionHuman Verify snapshot · 2024-06-13 05:02 -
osintcorp.netsnapshot · 2026-08-06 21:31 -
uyku4o2yg34ekvjtszg6gu7cvjzm6hyszhtu7c55iyuzhpr4k5knewyd.onionMedusa Chat snapshot · 2026-05-30 21:15 -
5ar4vuckm3k7osdlzskqkaqmqr4jjpmdikuotmlpkrbsxx7ard3xetyd.onionMedusa Chat snapshot · 2025-01-19 22:18 -
medusakxxtp3uo7vusntvubnytaph4d3amxivbggl3hnhpk2nmus34yd.onionsnapshot · 2024-12-10 05:11 -
s7lmmhlt3iwnwirxvgjidl6omcblvw2rg75txjfduy73kx5brlmiulad.onionHuman Verify snapshot · 2026-02-05 05:03 -
medusakxxtp3uo7vusntvubnytaph4d3amxivbgg13hnhpk2nmus34yd.onionsnapshot · 2024-12-12 16:46 -
hm2hlugduzuxiya5bgrsewfxmrzxbmslvg3t42zdzsorcn2nyfbrh6qd.onion504 Gateway Time-out snapshot · 2025-02-13 10:23 -
7aqabivkwmpvjkyefonf3gpy5gsubopqni7kcirsrq3pflckxq5zz4id.onionsnapshot · 2026-08-06 21:31 -
762a33bcwneu3i6m7g4unj7xoyvl3nolnbeqhm4jfap6d7uczj43mrqd.onionsnapshot · 2025-08-01 09:49 -
x4tqo27mrr5q5wobpuvw6rowmbclwe5h62etslydc6wnona73pmqwaid.onionsnapshot · 2025-08-01 09:51
Recent victims
The 50 most recent victims claimed by MEDUSA. Total in the index: 537.
| Date listed | Victim | Description |
|---|---|---|
| 2026-04-26 | Walman Optical | Walman Optical who is owned by well-known Company EssilorLuxottica is … |
| 2026-04-13 | Northeast Missouri Rural Telephone | NEMR provides high-speed and reliable internet services tailored for v… |
| 2026-04-02 | TouchSource | TouchSource delivers simple solutions for smart spaces that engage peo… |
| 2026-03-27 | Big Thumb | BigThumb IT Consultants provides a range of IT solutions including man… |
| 2026-03-25 | Live! Casino | Live! Casino is a premier gaming and entertainment company located in … |
| 2026-03-20 | University of Mississippi Medical Center (@ummcdata) | Leak Direct(https://t.me/ummcdata) The University of Mississippi Schoo… |
| 2026-03-17 | Bonanza Casino | Bonanza Casino is a vibrant entertainment venue in Reno that offers ga… |
| 2026-03-17 | Passaic County | Passaic County was created out of parts of Essex and Bergen Counties w… |
| 2026-03-17 | Cape May County | Cape May County Government is the official governing body of Cape May … |
| 2026-03-17 | Lehigh Carbon Community College | Lehigh Carbon Community College provides affordable, quality education… |
| 2026-03-12 | University of Mississippi Medical Center | The University of Mississippi School of Medicine (UMSOM) is the medica… |
| 2026-03-11 | Chartre Consulting | Chartre Consulting is a U.S.–based professional services and managemen… |
| 2026-03-11 | ToolpartsPro | ToolpartsPro specializes in providing a vast inventory of genuine OEM … |
| 2026-03-11 | AMEVIDA | AMEVIDA is one of the largest owner-managed companies in the German ca… |
| 2026-03-11 | Internation Planning Group | IPG has served clients residing in multiple Asian countries including … |
| 2026-03-11 | Shaft Drillers International | Shaft Drillers International is a U.S.-based construction and drilling… |
| 2026-03-11 | Acme | Acme Truck Line, Inc. (from www.acmetruck.com) is a U.S. transportatio… |
| 2026-03-11 | Frauenshuh | Frauenshuh Commercial Real Estate has been a leader in the commercial … |
| 2026-02-24 | (Begging Poors) Resource Corporation of America | (The company begged us for a long time with several ways to remove the… |
| 2026-02-20 | Colonial Van Lines | Colonial Van Lines is a U.S.-based long-distance moving and relocation… |
| 2026-02-20 | RTC | RTC (rtc.com) is a global retail solutions and merchandising company t… |
| 2026-02-20 | Aramsco | Aramsco is a U.S.-based distributor of professional cleaning, restorat… |
| 2026-02-17 | MESA Products | MESA Products is a U.S.-based industrial company that supplies cathodi… |
| 2026-02-10 | Grandview Family Medicine | Grandview Family Medicine is a healthcare provider offering a range of… |
| 2026-02-03 | Balloons Everywhere | Balloons.com is a wholesale distributor specializing in a wide range o… |
| 2026-02-03 | South Hays Fire Department | Hays County Emergency Services District 3 provides essential fire prev… |
| 2026-02-03 | Comune di Battipaglia | The Comune di Battipaglia is the official municipal government of Batt… |
| 2026-01-06 | Resource Corporation of America | Resource Corporation of America specializes in converting hospitals' a… |
| 2025-12-30 | JBS | JBS is a regional, public, nonprofit corporation established under Act… |
| 2025-12-19 | Concord Academy | Concord Academy is a specialized educational institution that serves s… |
| 2025-12-19 | Thunder Bay Counselling | Thunder Bay Counselling is a leading provider of personal and workplac… |
| 2025-12-19 | Sampoerna Agro | Founded in 1993 and headquartered in South Sumatra, Indonesia, PT Samp… |
| 2025-12-19 | Shamrock Technologies | Founded in 1941, Shamrock Technologies is a global provider of microni… |
| 2025-12-19 | Callipo Group | Callipo Group has been producing high-quality tuna and fish preserves … |
| 2025-11-25 | Universidade Municipal de São Caetano | USCS offers a diverse range of educational programs including in-perso… |
| 2025-11-25 | WR Comercial | WR Comercial helps businesses find great staff for important jobs like… |
| 2025-11-18 | Clackamas Community College | Clackamas Community College offers a variety of academic programs incl… |
| 2025-11-18 | PT Kalimantan Prima Persada | PT Kalimantan Prima Persada (KPP) is a subsidiary of PT Pamapersada Nu… |
| 2025-11-18 | Atrium Living Centers | Atrium Living Centers is a 100% employee-owned company providing skill… |
| 2025-11-18 | General Distributing | General Distributing Co is a company that operates in the Convenience … |
| 2025-11-18 | FDC Interiors | FDC / Interiors specializes in creating exceptional and luxurious spac… |
| 2025-11-18 | MFE Formwork Technology | MFE Formwork Technology is a global leader in aluminium formwork solut… |
| 2025-11-18 | Nationwide Legal LLC | Nationwide Legal LLC is a leading litigation support and legal service… |
| 2025-11-05 | LaRosa’s Pizzeria | LaRosa’s Pizzeria is a family-owned pizza restaurant chain founded in … |
| 2025-11-05 | Oscars Group | Oscars Group is a prominent hospitality collective in New South Wales,… |
| 2025-10-29 | Simon Property Group | Simon Property Group is a leading real estate investment trust (REIT) … |
| 2025-10-25 | Imagicle | Founded in 2010, Imagicle is head-quartered in Italy and has a fully o… |
| 2025-10-25 | Linxx Global Solutions | Linxx Global Solutions is a leading provider of mission-critical suppo… |
| 2025-10-25 | DALCANS | Otherwise, DALCANS will not make any exchange or refund of products or… |
| 2025-10-25 | Adore Children and Family Services | Adore Children and Family Services is a foster care agency dedicated t… |