Medusalocker — every breach we're tracking
Running log of incidents attributed to or claimed by Medusalocker in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.
Groups like Medusalocker steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.
Tracked incidents
Showing the 60 most recent of 78 incidents we've attributed to Medusalocker.
Forces Listed by medusalocker Ransomware Group
Organization with 28 emails extracted. Domain: ***.gc.ca…
Penticton and District Society for Community Living Listed by medusalocker Ransomware Group
Canadian charity providing disability-related services. CRA Registration: 119090686RR0001 | Penticton, British Columbia, Canada…
Karneslegal Listed by medusalocker Ransomware Group
Organization with 23 emails extracted. Domain: karneslegal.com…
Dadolighting Listed by medusalocker Ransomware Group
Organization with 17 emails extracted. Domain: dadolighting.com…
FunkeScheid Listed by medusalocker Ransomware Group
Notarkanzlei FunkeScheid, Kanzlei im Ostend, Frankfurt. 9755 emails. AD: Kanzlei.FunkeScheid.com…
Dolrad Listed by medusalocker Ransomware Group
Organization with 69 emails extracted. Domain: dolrad.ae…
Estrela Listed by medusalocker Ransomware Group
Organization with 11 emails extracted. Domain: estrela.ind…
Sgs Gmbh Listed by medusalocker Ransomware Group
Organization with 933 emails extracted. Domain: sgs-gmbh.com…
T Online Listed by medusalocker Ransomware Group
Organization with 823 emails extracted. Domain: t-online.de…
Mairie Thiverval Grignon Listed by medusalocker Ransomware Group
Organization with 162 emails extracted. Domain: mairie-thiverval-grignon.fr…
Bd Listed by medusalocker Ransomware Group
Organization with 772 emails extracted. Domain: bd.zh.ch…
Colegio María Inmaculada (CMI) Listed by medusalocker Ransomware Group
Catholic school in Moravia, Costa Rica. Domain cmi.local / mariainmaculada.ed.cr. Servers: CMI-DC01, CMI-APP, CMI-HTTP2, main-server1/2.…
Hathcock (Personal) Listed by medusalocker Ransomware Group
Personal comprehensive reports. Individuals: Noel Ray Hathcock, Trinity John Hathcock.…
SIT Group / Robusta Listed by medusalocker Ransomware Group
Italian company SIT Group (sitgroup.it) and Bulgarian Robusta (robusta.bg). Also abv.bg emails.…
Bandeirante Supermercados Listed by medusalocker Ransomware Group
Brazilian supermarket chain.…
Raycolighting Listed by medusalocker Ransomware Group
Organization with 2 emails extracted. Domain: raycolighting.com…
Strategic Imports Listed by medusalocker Ransomware Group
Australian auto parts/batteries importer. Brands: Strategic Imports, Auto Parts Now, Discount Batteries Now. User: bstuart (Brad Stuart). QN…
Magnolia (Israel) Listed by medusalocker Ransomware Group
Israeli jewelry company. Silver & accessories, participates in Vicenza jewelry fair (2025/2026). Sells via buyme.co.il gift cards. ~38k file…
Atencio Engineering Listed by medusalocker Ransomware Group
Civil engineering & land surveying firm. Services: site plans, boundary surveys, OWTS (septic) design, fire line design, elevation certifica…
Desert Christian Schools (DCS) Listed by medusalocker Ransomware Group
K-12 Christian school affiliated with First Baptist Church of Lancaster, CA. ADP payroll, DCFS childcare program, City of Lancaster Water Sa…
CourtSmart Listed by medusalocker Ransomware Group
Court technology company. Domain courtsmart.com / COURTSMART2. Dev server: dev-rich20.courtsmart.com. Connections to JIS.org, nashville.org.…
ActionAid / TACOSA Listed by medusalocker Ransomware Group
NGO sector. Domains: actionaid.org, tacosa.org.za, immigration.go.tz.…
Académie de Montpellier / CSJM Listed by medusalocker Ransomware Group
French public school network. Domain CSJM.BEZIERS, part of Académie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teac…
CEAGESP / Netfeirasp Listed by medusalocker Ransomware Group
Brazilian produce wholesale market network. Domain netfeirasp.ceagesp (CEAGESP). Also demarchibrasil.com.br accounts.…
Elken Sdn Bhd Listed by medusalocker Ransomware Group
MLM / health & beauty products company. ~16k emails extracted.…
Palmers Relocations Listed by medusalocker Ransomware Group
Australian international removals & relocation company. FIDI accredited, ISO 9001:2015 certified. Services: household moves, storage, custom…
dulay.ca Listed by medusalocker Ransomware Group
Price-$40000 (sale in one hand there are options for making a profit from these files will be included in the deal) 500Gb…
Trimble Inc / Gerrard Inc Listed by medusalocker Ransomware Group
Technology company Trimble (trimble.com) and Gerrard Inc (gerrardinc.com). ~18 Trimble email addresses.…
usenergy Listed by medusalocker Ransomware Group
Price-$120000 (sale in one hand there are options for making a profit from these files will be included in the deal)…
UnigazJordan Listed by medusalocker Ransomware Group
www.unigaz.net $690.6 Million The list of files is available at the link https://dropmefiles.com/9HGAJ…
Mulia Raya Listed by medusalocker Ransomware Group
www.muliaraya.co.id $34.8 Million The list of files is available at the link https://dropmefiles.com/lAZQo…
Curtain Bluff Listed by medusalocker Ransomware Group
www.curtainbluff.com Curtain Bluff files Vacationer information (personal data), audit information (including past years), bank activity (st…
Inversiones Clinica Del Meta SA Listed by medusalocker Ransomware Group
www.clinicameta.co Description employee information – patient information – agreements – password data – appointment information Sold with 1…
MICRO MANUFACTRING Listed by medusalocker Ransomware Group
Micro Manufacturing Inc. Descriptionemployee information – agreement – customer email(.xls)-.msg outlook files. password data\\ Sold with 1-…
bendixengineering Listed by medusalocker Ransomware Group
Descriptionemployee information – agreement – customer email(.xls)-.msg outlook files Data-2016-2024 years Price-$50000 (sale in one hand th…
SILKNET COMPANY Listed by medusalocker Ransomware Group
URL:https://silknet.com https://geocell.ge/ On sale:Company email base(about 1tb)Customer dataCompany audit for 2023\24and more than 3tb of …
Protected: HIDE NAME Listed by medusalocker Ransomware Group
There is no excerpt because this is a protected post.…
Protected: HIDE NAME SELL DATA SOON Listed by medusalocker Ransomware Group
There is no excerpt because this is a protected post.…
SHAMASS.ORG Listed by medusalocker Ransomware Group
Descriptionemployee information – agreement – customer email(.xls)-.msg outlook files Price-$50000 (sale in one hand there are options for m…
Protected: Name is hidden Listed by medusalocker Ransomware Group
There is no excerpt because this is a protected post.…
skalar.com Listed by medusalocker Ransomware Group
There is no excerpt because this is a protected post.…
Ada-Borup-West School Listed by medusalocker Ransomware Group
Descriptionemployee information – student information – all contracts Price: 35000$…
wellons.org Listed by medusalocker Ransomware Group
Descriptionemployee information – agreement – customer email(.xls)- pst files 15+GB all outlook message 2006-2023 year Price: 55000$…
Confidential files Listed by medusalocker Ransomware Group
A large number of documents of large companies are available for sale Revenue-$10-$70kk Financial documents, client cases, passports, tax ev…
Protected: INSULCANA CONTRACTING LTD Listed by medusalocker Ransomware Group
There is no excerpt because this is a protected post.…
INSULCANA CONTRACTING LTD Listed by medusalocker Ransomware Group
Descriptionemployee information – agreement – customer email(.xls)- passport all canada and other documents Price: 35000$…
Protected: Hidden name Listed by medusalocker Ransomware Group
There is no excerpt because this is a protected post.…
Hoosier Equipment company Listed by medusalocker Ransomware Group
DescriptionClient Case – agreement – email(.msg)- and other documents Price: 60000$…
Ucamco Belgium Listed by medusalocker Ransomware Group
DescriptionClient Case – customers email-Audit information-There is also access to email for newsletters on behalf of the company PRICE-$800…
kafflogistic.hu Listed by medusalocker Ransomware Group
DescriptionClient Case – agreement – email(outlook files)- contracts – and other documents PRICE-$50000…
SELL DATA(qtox) Listed by medusalocker Ransomware Group
Available for sale: to buy please contact qtox price negotiable qtox-E9CD65687463F67F64937E961DD723DC82C79CB548375AAE8AA4A0698D356C5E7E157B2…
Hausamman company Listed by medusalocker Ransomware Group
DescriptionClient Case – customers email-documents PRICE-$20000…
reutlingen.ihk.de Listed by medusalocker Ransomware Group
DescriptionClient Case – agreement – email(.msg)- contracts – and other documents PRICE-$80000…
arborsct.com Listed by medusalocker Ransomware Group
DescriptionClient Case – agreement – email(.msg)- and other documents Price: 60000$ One copy will be sold, confidential informationThe compa…
LETAPE JEUNES Listed by medusalocker Ransomware Group
DescriptionClient Case – agreement – email(.msg)- contracts – and other documents(passports) PRICE-$40000…
bsw-architects.com Listed by medusalocker Ransomware Group
DescriptionClient Case – agreement – email(.msg)- contracts – and other documents PRICE-$80000 There are many projects, agreements and contr…
Dyatech company Listed by medusalocker Ransomware Group
Dyatech company was listed on the medusalocker ransomware leak site. The group claims to have stolen internal data.…
emscrm Listed by medusalocker Ransomware Group
emscrm was listed on the medusalocker ransomware leak site. The group claims to have stolen internal data.…
DGLEGAL Listed by medusalocker Ransomware Group
DGLEGAL was listed on the medusalocker ransomware leak site. The group claims to have stolen internal data.…
MIDAS Company Listed by medusalocker Ransomware Group
MIDAS Company was listed on the medusalocker ransomware leak site. The group claims to have stolen internal data.…
Your email leaked. See who’s selling your address.
Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.