Medusa is a ransomware-as-a-service provider first identified in June 2021, according to the advisory. As of February, Medusa has impacted over 300 victims from multiple critical infrastructure ...

Medusa ransomware has claimed over 40 victims in the first two months of 2025, including a confirmed attack on a US healthcare organization. This is almost twice the number of Medusa attacks observed ...

The FBI, CISA, and MS-ISAC issued a joint cybersecurity advisory about Medusa Ransomware. Medusa actors use a double extortion model, encrypting data and threatening to release it if a ransom is ...