Medusa Ransomware Hits 500 Targets Across Critical U.S. Sectors

A ransomware group known as Medusa is aggressively expanding its operations within the United States. Recent reports indicate that more than 500 organizations across healthcare, finance, defense, and technology have fallen victim to these attacks. This is a significant jump from the 300 victims reported earlier this year.

The attackers use a double extortion strategy. They encrypt sensitive data to lock users out of their systems and threaten to release private information publicly unless the victims pay a ransom. The group has been using an affiliate model since 2023, paying brokers between 100 dollars and 1 million dollars to help them gain access to corporate networks.

Experts warn that the group primarily targets unpatched software to gain entry. The healthcare sector has been identified as a particularly frequent target for these criminal actors. To stay safe, security agencies suggest that organizations prioritize firmware updates, use network segmentation, and restrict remote access to trusted users only.

For the broader financial and crypto market, these attacks highlight the ongoing vulnerability of digital infrastructure. As these groups move more money, security protocols remain a top priority for protecting digital assets and organizational integrity.