St. Thomas Aquinas High School Listed by Medusa Ransomware Group

On July 30, 2024, St. Thomas Aquinas High School in Fort Lauderdale, Florida, appeared on the leak site operated by the Medusa ransomware group. The private Roman Catholic college-preparatory school, which enrolls 2,420 students, had 103.8 GB of internal files exfiltrated during a ransomware attack. The listing does not specify which exact records were taken or how many individuals are affected.

Details from the Leak Site

The Medusa leak site listing states that the school’s corporate systems were compromised and that attackers successfully exfiltrated data before encrypting systems. The disclosure states the total volume of stolen material as 103.8 GB but provides no further breakdown of the file types or the records contained inside. No ransom demand figure or payment deadline is listed in the public entry. The incident was first indexed on ransomware tracking platforms on July 30, 2024, and remains active on the extortion portal.

Why This Matters for You and Your Family

If you or your child attends or has attended St. Thomas Aquinas High School, your personal information may now sit inside the stolen archive. Schools hold names, dates of birth, Social Security numbers, addresses, parent contact details, medical notes, disciplinary records, and financial information tied to tuition payments. When this volume of data leaves controlled systems, the risk extends beyond the student to every family member linked to the same household. Even if the exact contents remain unknown, the claimed exfiltration of internal files means the exposure is real and permanent.

Doxxing and Identity-Chain Risks

Ransomware groups rarely stop at posting a single archive. Once internal files are obtained, opportunistic actors scrape them for email addresses, usernames, and passwords that appear in other breaches. These credentials then unlock gaming accounts, social-media profiles, and cloud storage belonging to students or siblings. A single leaked school record can anchor an identity chain that links a child’s Roblox or Fortnite handle to a parent’s email, phone number, and physical address. The result is targeted harassment, account takeovers, and long-term doxxing that can follow a family for years.

Medusa’s Known Track Record

Public reporting attributes Medusa with emerging in mid-2021 and steadily increasing the pace of double-extortion attacks. The group is known for compromising organizations across education, healthcare, and local government, then publishing proof-of-exfiltration samples on its dark-web portal when victims refuse payment. Typical playbooks begin with phishing or exploited remote-desktop credentials, followed by rapid lateral movement, data archiving, and deployment of custom ransomware. Medusa’s operators maintain pressure through countdown timers and selective leaks of sensitive documents, a pattern consistent with the St. Thomas Aquinas High School listing.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password used at the school or associated parent portals anywhere it has been reused, and switch to 2FA through an authenticator app instead of text messages.
• Cover the entire household because DoxxScan family protection extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists manage takedown requests for any exposed personal documents or photos that surface on data-broker and extortion sites.

The breach of St. Thomas Aquinas High School shows how quickly a school’s internal systems can become a gateway to family exposure. One timely scan and consistent monitoring can break the chain before criminals turn stolen records into long-term harassment. DoxxScan by GalaxyWarden delivers that continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.