International University of Sarajevo Listed by medusa Ransomware Group

On November 4, 2024, the International University of Sarajevo appeared on the Medusa ransomware group’s leak site. The listing states that internal files were exfiltrated during a ransomware attack on the private Bosnian university, which serves 1,650 students from 55 countries and employs 263 staff. The disclosure does not quantify the number of affected records or specify which exact files were taken.

Details from the Medusa Listing

The primary disclosure on the Medusa leak site states that the university’s data was obtained through a ransomware operation. It lists the International University of Sarajevo, founded in 2004 and located at 15 Hrasnika Cesta in Sarajevo, as a victim. The entry does not detail the volume or specific categories of data beyond stating that internal files were exfiltrated. No ransom demand figure or payment deadline is公开 shown in the current listing.

Public reporting on Medusa indicates the group typically posts samples or proof of stolen data to pressure victims. In this case the leak site serves as the official notification channel, meaning anyone connected to the university must treat the breach as confirmed.

Why This Matters for You and Your Family

If you or a family member attended, worked at, or applied to the International University of Sarajevo, your personal information may now sit in an attacker’s archive. University records routinely contain names, dates of birth, contact details, academic transcripts, employment contracts, and financial aid information. Once these files leave the institution’s control, they can surface on criminal forums months or years later.

November 4, 2024 marks the moment the breach became public. From that date forward, the risk of identity theft, phishing campaigns tailored to students and staff, or resale of your data on underground markets becomes immediate and ongoing.

The Doxxing and Identity-Chain Risk

University breaches create long identity chains. An email address leaked from an academic system is often the same one used for banking, government services, and children’s school portals. Attackers combine it with faculty phone numbers, student addresses, and passport scans sometimes included in international admissions files. The result is a map that links your online handles to your real-world identity, enabling doxxing, targeted extortion, or account takeovers.

Credential leaks of this type frequently cascade into gaming accounts. Students and younger family members often reuse university emails or passwords on Steam, Roblox, or Discord. A single exposed record can hand attackers the keys to those platforms, leading to further harassment and doxxing that reaches siblings or children at home.

Medusa Ransomware Group’s Track Record

Public reporting attributes Medusa’s first major campaigns to late 2021. The group has since hit hospitals, manufacturers, schools, and government contractors across multiple continents. Its playbook follows a double-extortion model: encrypt victim systems, exfiltrate sensitive files before encryption completes, then threaten both operational shutdown and public data release unless payment is made.

Medusa typically gives victims a short window to negotiate before uploading proof packages to its leak site. The International University of Sarajevo listing fits this pattern, showing that the group continues to target educational institutions that hold rich stores of personal and financial data on thousands of individuals.

What to do

• Run a DoxxScan to map every link between your university email, handles, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure tied to this incident is caught in hours rather than months.
• Rotate any password you used at the International University of Sarajevo anywhere else it appears, and switch on 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same leaked university credentials.
• Let remediation specialists manage takedown requests for any exposed personal documents that appear on data-broker or forum sites.

The Medusa listing of the International University of Sarajevo reminds us that educational data breaches create persistent, cross-border risks that do not vanish when the news cycle moves on. Staying ahead requires deliberate action rather than hoping the stolen files stay buried. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage including children’s gaming accounts give families a practical way to reduce that exposure before criminals exploit the next link in the chain.