Globes Listed by Medusa Ransomware Group

On July 18, 2024, Israeli business periodical Globes appeared on the leak site operated by the Medusa ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the publisher, whose offices sit at 53 Etzel Street in Rishon LeZiyyon. Anyone whose personal or financial details have ever passed through Globes’ systems — subscribers, advertisers, sources, or employees — may now face heightened exposure.

Reported Details from the Listing

The Medusa leak site entry, still accessible via the .onion link tracked by ransomware.live, claims successful data exfiltration from Globes but does not quantify the number of records involved or list specific file types. It simply states that internal files were exfiltrated following a ransomware deployment. No ransom demand figure or payment deadline is shown in the public listing. The disclosure indicates the incident occurred prior to the July 18 publication date on the leak site; exact compromise timing remains undisclosed by either party.

Why This Matters for You and Your Family

When a respected business news outlet like Globes suffers a breach, the ripple effects reach far beyond corporate walls. Readers, interview subjects, advertising partners, and current or former staff often entrust the publication with names, addresses, phone numbers, email accounts, and financial transaction records. Once those details sit on a ransomware leak site, they become raw material for identity thieves, phishing campaigns, and long-term fraud. Even if you cannot recall giving information to Globes, shared business databases and third-party vendor lists mean your data could still be present. The uncertainty itself creates risk: you cannot defend against a threat you cannot see.

The Doxxing and Identity-Chain Risk

Exfiltrated internal files frequently contain spreadsheets that link personal identifiers to professional roles, client lists, or payment histories. Attackers and subsequent buyers can combine these fragments with other leaked datasets to build complete identity chains — mapping an email address to a home address, phone number, family members, and even children’s online gaming accounts. Such chains fuel spear-phishing, SIM-swapping, and account takeover attempts that feel personally targeted. Credential leaks of this nature routinely cascade into gaming platforms, where compromised parent accounts expose children to harassment or further data theft.

Medusa’s Publicly Known Track Record

Public reporting attributes Medusa’s first major campaigns to late 2022. The group has since listed dozens of organizations across North America, Europe, and the Middle East, with notable prior victims including manufacturing firms, healthcare providers, and professional-services companies. Their typical playbook begins with initial access gained through compromised remote desktop credentials or exploited vulnerabilities, followed by aggressive lateral movement, data exfiltration, and deployment of ransomware. Medusa then waits a short period before publishing samples on their leak site to pressure victims. When payment is not received they gradually release larger portions of the stolen archive, a pattern consistent with the current Globes listing.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real-world identity, then use the cleanup of Warden to shrink your exposure footprint.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours rather than months.
• Rotate any password you have ever used on Globes-related services or logins and replace it with a unique passphrase protected by an authenticator app for 2FA.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the next link in an identity-chain attack.
• Let remediation specialists handle data-broker takedown requests and persistent leak-site references on your behalf while you focus on securing day-to-day accounts.

The Medusa listing of Globes is a reminder that even established news organizations can become unwilling gateways to personal data theft. Acting quickly on the signals this claimed breach provides can break the chain before thieves turn raw files into targeted attacks against you or your family. DoxxScan by GalaxyWarden delivers that continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists — including household coverage that protects children’s gaming accounts from cascading compromises.