More than 200 victims of Medusa ransomware identified over the last year, CISA says

The Cybersecurity and Infrastructure Security Agency and FBI have updated an advisory on Medusa ransomware, stating that over 500 victims have been hit by Medusa actors as of April 2026. This is an increase from the previously reported 300 victims, many of which are in critical infrastructure sectors, that were attacked as of 2025. The update indicates a significant rise in the number of victims over the past year. The Medusa group has been active, with the number of identified victims exceeding 200 over the last year. The advisory was initially released in March 2025 and has been updated to reflect the growing number of attacks. The majority of the victims are in critical infrastructure sectors, according to the previous report.