Leprohon Listed by Medusa Ransomware Group

On October 3, 2025, Canadian construction firm Leprohon Inc. appeared on the leak site of the Medusa ransomware group, confirming that internal files had been exfiltrated during a ransomware attack. The company, which operates in commercial and residential construction and employs roughly 350 people from its headquarters in Sherbrooke, Quebec, now faces the reality that sensitive business records containing employee and customer information are in the hands of criminals.

Reported Details of the Breach

Public reporting from the ransomware leak site indicates that Medusa claims to have stolen internal files from Leprohon. The exact volume of data and the specific types of records remain unclear, but ransomware incidents of this nature routinely involve employee personal details, financial documents, contracts, and customer information. No precise victim count inside the company has been disclosed, yet with 351 employees the potential reach touches hundreds of families connected to the business.

October 3, 2025 marks the public listing date. The attack follows the typical ransomware pattern of encryption followed by data theft and extortion pressure. Available reporting describes the company as a mid-sized regional player with annual revenue between $25 million and $50 million, making it a realistic target for financially motivated groups seeking to pressure smaller organizations into payment.

Why This Matters for You and Your Family

When a company like Leprohon suffers a breach, the information exposed often includes names, addresses, dates of birth, Social Insurance Numbers, email addresses, and phone numbers of employees, subcontractors, and clients. If you or a family member works there, banks with them, or has done business with them, your personal data may now be circulating among threat actors.