Medusa ransomware victim count passes 500, advisory says

A joint advisory from CISA, the FBI and the Department of Health and Human Services says the Medusa ransomware operation has compromised more than 500 organizations across critical-infrastructure sectors since June 2021, according to the source. The operation evolved from a closed variant into a ransomware-as-a-service model. The reported sectors include healthcare, defense industrial base, manufacturing, government services, IT, financial services, education, legal and insurance. The source says the earlier reported figure exceeded 300 victims in March 2025.