MEDES College Listed by medusa Ransomware Group

On February 10, 2025, MEDES College appeared on the leak site of the Medusa ransomware group. The Canadian beauty and wellness school is claimed to have had internal files exfiltrated after a ransomware attack. Students, staff, and clients whose personal information was stored in those systems are now at risk of identity theft and doxxing.

What Public Reporting Shows

Public reporting indicates that Medusa listed MEDES College on its data leak portal on February 10, 2025. The institution, located at 1040 Champlain St Ste 300, Dieppe, New Brunswick, employs 21 people and offers programs in spa and wellness education along with actual spa services. Available reporting describes the exposed material as internal files taken during a ransomware incident. The exact number of individuals affected remains unknown, and the specific types of records have not been publicly detailed beyond the broad category of internal files.

Why This Matters for You and Your Family

When a school or training college is breached, the data often includes names, addresses, phone numbers, dates of birth, Social Insurance Numbers, payment details, and student transcripts. If you or anyone in your family has taken courses there, received spa treatments, or worked at the college, your information could now be in attackers’ hands. Credential leaks like this one frequently spread to other services where the same email and password are reused, putting bank accounts, government portals, and children’s online profiles at risk. Families feel the impact directly when children’s records or parents’ employment files surface in underground forums.

The Doxxing and Identity-Chain Implications

Ransomware operators rarely stop at posting generic files. Once initial data appears, opportunistic criminals scrape it for email addresses, usernames, and phone numbers that link across social media, gaming platforms, and data-broker profiles. This creates an identity chain: a single leaked school record can expose a parent’s LinkedIn, a teenager’s Discord handle, and a family address. The result is targeted harassment, SIM-swapping attempts, or full doxxing packages sold on dark-web marketplaces. Gaming accounts belonging to you or your children are especially vulnerable because credential leaks cascade quickly into account takeovers that reveal real names and home addresses.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup included.
• Rotate any password you used at MEDES College anywhere else it is reused and enable 2FA through an authenticator app, not SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that chain back to the same address.
• Let remediation specialists handle takedown requests across data brokers and suspicious sites on your behalf.

The Medusa group first gained attention in 2021 and has since targeted hospitals, schools, and mid-sized businesses across North America and Europe. Public reporting attributes to them a consistent playbook of encrypting networks, exfiltrating data before encryption completes, then pressuring victims with both ransom demands and threats to publish stolen files on their leak site. Their typical style combines initial access through phishing or remote-desktop vulnerabilities with aggressive extortion that can last weeks.

Protecting your family no longer ends with changing one password. A forward-looking approach means treating every breach as the start of a potential chain that can reach your home, your children’s games, and your financial life. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists who also cover household and children’s gaming accounts. Starting that process now limits the damage from incidents like the MEDES College breach before it spreads further.