← Back to Feed
More than 200 victims of Medusa ransomware identified over the last year, CISA says
August 18, 2026 · The Record · Severity: CRITICAL
The Cybersecurity and Infrastructure Security Agency (CISA) and FBI updated an advisory on the group initially released in March 2025 — writing that as of April 2026, Medusa actors have hit more than 500 victims. CISA previously said 300 victims, many of which are in critical infrastructure sectors, were attacked as of 2025.
Key Takeaways
- The Cybersecurity and Infrastructure Security Agency (CISA) and FBI updated an advisory on the group initially released in March 2025.
- CISA previously said 300 victims, many of which are in critical infrastructure sectors, were attacked as of 2025.
- 300 victims, many of which are in critical infrastructure sectors, were attacked as of 2025.