ZeroHour

medusa

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
530since 2023-02-13
Last post
04-26 16:15UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
Apple Electric Ltd · Nov 16, 2024
LEGO Construction Co · Nov 16, 2024
Logistical Software Ltd · Nov 16, 2024
Manens-Tifs SpA · Nov 16, 2024
Automha · Nov 6, 2024
American Mechanical, inc · Nov 6, 2024
American Medical Billing · Nov 6, 2024
Island Coastal Services Ltd · Nov 6, 2024
Spirit Lake Community School District · Nov 6, 2024
United Sleep Diagnostics · Nov 6, 2024
International University of Sarajevo · Nov 6, 2024
Whitaker Construction Group · Nov 6, 2024
McMillan Electric Company · Nov 6, 2024
Alliance Technical Group · Nov 6, 2024
Østerås Bygg · Oct 15, 2024
World Vision Perú · Oct 15, 2024
Construction Systems inc · Oct 15, 2024
Ultimate Removal · Oct 15, 2024
Ideker · Oct 15, 2024
Inner City Education Foundation · Oct 15, 2024
SystemPavers · Oct 15, 2024
Isola · Oct 10, 2024
BELL DATA, Inc · Oct 10, 2024
Sub-Zero, Wolf, and Cove · Oct 10, 2024
Travel Alberta · Oct 10, 2024
Emerson · Oct 10, 2024
Istrail · Oct 10, 2024
Albany College of Pharmacy · Oct 10, 2024
Arelance Group · Oct 10, 2024
Providence Public School Department · Sep 28, 2024
AZPIRED · Sep 28, 2024
Compass Group · Sep 28, 2024
Compass Group (2nd attack) · Sep 28, 2024
Structural Concepts · Sep 28, 2024
Fritzøe Engros · Sep 28, 2024
Hairstore · Sep 28, 2024
IP blue Software Solutions · Sep 28, 2024
Wilson & Lafleur · Sep 28, 2024
Xtera Communications · Sep 28, 2024
Røros Hotell · Sep 28, 2024
Shomof Group · Sep 15, 2024
Kingsport Imaging Systems · Sep 15, 2024
America Voice · Sep 15, 2024
Prosolit · Sep 15, 2024
Grupo Cortefiel · Sep 15, 2024
Hospital Episcopal San Lucas · Sep 15, 2024
Starr-Iva Water & Sewer District · Sep 15, 2024
Karakaya Group · Sep 15, 2024
Micron Internet · Sep 15, 2024
TECHNOLOG S.r.l. · Sep 15, 2024

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .