Camp Susque Listed by medusa Ransomware Group

On August 1, 2024, the summer camp operator Camp Susque appeared on the leak site of the Medusa ransomware group. The listing states that internal files totaling 48.9 GB were exfiltrated during a ransomware attack. The Pennsylvania-based organization, which has offered wilderness trips, family camps, winter camps, homeschool classes, field trips, and retreats since 1947, has not yet published its own breach notification, leaving the exact number of affected individuals unknown.

Details in the Leak-Site Listing

The Medusa leak site entry states that attackers gained access to Camp Susque’s corporate systems and removed 48.9 GB of internal files. The disclosure does not specify the precise data types contained in the archive, nor does it list individual record counts. It simply states that the material was stolen and will be published if the camp does not meet the group’s extortion demands. The listing includes the camp’s physical address at 47 Susque Camp Rd, Trout Run, Pennsylvania, and notes that the organization employs 16 people. No sample files have been released publicly at the time of this writing, so the full scope of personal information at risk remains unclear.

Why This Matters for You and Your Family

If you or your children have attended Camp Susque programs, your personal details may sit inside the stolen files. Camps routinely collect names, home addresses, phone numbers, email addresses, dates of birth, emergency contacts, medical information, and sometimes Social Security numbers for minors. When such records leave an organization without proper encryption, they become raw material for identity theft, phishing campaigns, and long-term fraud. Even if the exact contents are not yet public, the 48.9 GB volume suggests a substantial cache of operational and participant data. Families who trusted the camp with sensitive child-related records now face the reality that those records could surface on criminal forums at any time.

Doxxing and Identity-Chain Risks

Ransomware leaks rarely stop at one company. A single exposed email or phone number can be cross-referenced with gaming usernames, social-media handles, and school records to build a complete profile of you and your household. Children’s information is especially valuable to attackers because it can link to family financial data and persist for years. Credential leaks from summer-camp systems often cascade into gaming-account takeovers, where stolen passwords grant entry to Roblox, Minecraft, or Discord profiles that contain additional personal details and payment methods. These chains turn one breach into repeated harassment or financial loss. Continuous monitoring that maps handles to real identities is one of the few practical defenses against such expanding exposure.

Medusa’s Publicly Known Track Record

Public reporting attributes Medusa’s first major campaigns to late 2023. The group operates a double-extortion model: it encrypts victim systems and simultaneously threatens to publish stolen data unless a ransom is paid. Notable prior targets have included healthcare providers, manufacturers, and educational organizations. Medusa typically gains initial access through phishing, remote-desktop protocol brute force, or exploited vulnerabilities in internet-facing applications. Once inside, operators exfiltrate documents before deploying ransomware. Their leak site functions as both a shaming platform and a sales portal for unsold data. The exact tactics used against Camp Susque have not been disclosed, but the group’s established playbook centers on stealing large document repositories and applying sustained pressure through public listings.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, gaming handles, and real identities so you can see exactly what chains back to the Camp Susque breach.
• Rotate any password you ever used at Camp Susque or related camp portals, then enable 2FA through an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure that touches your family is flagged within hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts, which frequently become targets when camp records leak.
• Let remediation specialists handle data-broker takedown requests and opt-out processes that would otherwise consume months of your own time.

The Camp Susque listing is a reminder that even long-established community organizations can become ransomware targets with little warning. Acting quickly on the credentials and personal details already circulating can limit how far attackers push the stolen information. DoxxScan’s continuous monitoring across 13.1B+ breach records and 100+ platforms, combined with AI-powered identity-chain mapping and hands-on remediation by specialists, gives families the practical tools needed to interrupt these doxxing chains before they reach children’s gaming accounts or financial records.