Novus International Listed by Medusa Ransomware Group

On April 12, 2024, Novus International appeared on the Medusa ransomware group’s leak site with 151.3 GB of internal files listed for public download. The Missouri-based animal nutrition company, which develops feed additives for livestock, poultry, and aquaculture, is named in the listing as having been hit by a ransomware attack in which attackers exfiltrated data before encrypting systems. Anyone whose employment, customer, or vendor records touched Novus International may now have personal information circulating in criminal channels.

Details in the Medusa Listing

The Medusa leak site states that attackers stole 151.3 GB of internal files during a ransomware incident. The listing does not specify the exact data types or the number of individuals affected. Public mirrors of the site, including ransomware.live, show sample screenshots and file trees but do not quantify records containing names, addresses, financial details, or employee information. Novus International has not yet released a formal customer notification detailing the breach scope, so the full extent of exposed personal data remains unknown.

Why This Matters for You and Your Family

When a company like Novus International loses control of internal files, the information often includes employee records, supplier contracts, invoices, and correspondence that contain home addresses, Social Security numbers, dates of birth, and contact details. If you or a family member worked at Novus, sold to Novus, or had business with the firm after its founding in 1991, your information could be among the 151.3 GB now hosted on an onion site. Once posted, that data is copied by other criminals within hours and begins appearing on additional forums and dark-web markets.

April 12, 2024 marks the moment the clock started for identity thieves. Criminals do not wait for companies to send breach letters. They immediately test stolen credentials against banks, email providers, and government portals.

Doxxing and Identity-Chain Risks

Internal files rarely contain only one data point. A single spreadsheet can link an employee’s work email to a personal phone number, home address, spouse’s name, and children’s school activities. Attackers chain these fragments with username-handle leaks from gaming platforms or older breaches to build complete identity profiles. The result is doxxing that escalates from nuisance calls to targeted fraud, account takeovers, and physical stalking. Credential leaks of this nature frequently cascade into gaming account compromises because the same email and password combinations are reused across work systems and entertainment services used by you or your children.

Medusa Ransomware Group Track Record

Public reporting attributes Medusa’s first major campaigns to late 2022. The group operates a double-extortion model: it encrypts victim networks and simultaneously exfiltrates data, then demands payment to prevent publication. Notable prior victims include manufacturing firms, healthcare providers, and technology companies. Medusa typically gains initial access through phishing, remote-desktop protocol brute force, or exploited vulnerabilities in internet-facing software. After exfiltration, the group posts victim data on its leak site with countdown timers if ransom is not paid. The exact playbook used against Novus International has not been disclosed, but the presence of 151.3 GB of files on the Medusa onion site follows the group’s established pattern.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you ever used at Novus International or its vendor portals, replace it with a unique passphrase, and secure every account with 2FA through an authenticator app rather than SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often become the next link in doxxing chains when work credentials leak.
• Let remediation specialists handle ongoing takedown requests for your personal information appearing on data-broker and extortion sites.

The Medusa listing of Novus International is a reminder that even specialized manufacturers hold data that can harm ordinary families once it reaches criminal marketplaces. Acting quickly on the exposure gives you the best chance of limiting damage before thieves complete their identity chains. Start your DoxxScan trial today and combine continuous monitoring, identity-chain mapping, and hands-on specialist remediation to protect yourself and your entire household, including gaming accounts that attackers love to hijack.