ZeroHour

medusa

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
530since 2023-02-13
Last post
04-26 16:15UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
The Pyle Group · Aug 22, 2024
Percento Technologies Internationa · Aug 22, 2024
Gentlemen Group GmbH · Aug 2, 2024
St. Thomas Aquinas High School · Aug 2, 2024
Camp Susque · Aug 2, 2024
Ali Gohar · Aug 2, 2024
Globes · Jul 24, 2024
AA Munro Insurance · Jul 24, 2024
Owens Valley Career Development Center · Jul 24, 2024
Coffrage LD · Jul 24, 2024
Vivara · Jul 24, 2024
American Golf · Jul 20, 2024
Royal Brighton Yacht Club · Jul 20, 2024
ValeCard · Jul 20, 2024
H&H Group · Jul 20, 2024
Jariet Technologies · Jul 20, 2024
Viasat · Jul 9, 2024
Olympus Group · Jul 9, 2024
Cedar Technologies · Jul 9, 2024
Ontario West and Bill Blaney Insurance Brokers · Jul 2, 2024
North Coast Petroleum · Jul 2, 2024
Strauss Brands · Jul 2, 2024
Harry Perkins Institute of medical research · Jul 2, 2024
GEMCO Constructors · Jun 20, 2024
Dynamo Electric · Jun 20, 2024
Farnell Packaging · Jun 20, 2024
Victoria Racing Club · Jun 20, 2024
Tri-City College Prep High School · Jun 20, 2024
Fitzgerald, DePietro & Wojnas CPAs, P.C. · Jun 20, 2024
AJE · Jun 20, 2024
Sems and Specials · Jun 4, 2024
St. Helena · Jun 4, 2024
Health People · Jun 4, 2024
IPPBX · Jun 4, 2024
Market Pioneer International Corp · Jun 4, 2024
Mercy Drive Inc · Jun 4, 2024
Radiosurgery New York · Jun 4, 2024
Inside Broadway · Jun 4, 2024
Oracle Advisory Services · Jun 4, 2024
Women's Sports Foundation · Jun 4, 2024
One Toyota of Oakland · May 28, 2024
Chemring Group · May 28, 2024
Autobell Car Wash, Inc · May 28, 2024
NITEK International LLC · May 28, 2024
National Metalwares, L.P · May 28, 2024
Colonial Surety Company · May 28, 2024
Merritt Properties, LLC · May 28, 2024
WEICON · May 28, 2024
County Connection · May 28, 2024
Comwave · May 28, 2024

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .