Medusa ransomware group expands attacks, breaches over 500 U.S. critical infrastructure organizations

A ransomware-as-a-service group, Medusa, has intensified its attacks on U.S. critical infrastructure, impacting more than 500 organizations across sectors including healthcare, defense, manufacturing, government services, information technology, and financial services. Federal agencies, including CISA, have noted this increase from previous reports, highlighting the group's use of a double-extortion method involving system encryption and data theft.