{"id":50635,"date":"2026-09-07T08:15:47","date_gmt":"2026-09-07T08:15:47","guid":{"rendered":"https:\/\/cryptomag.finance\/?p=50635"},"modified":"2026-09-07T08:15:47","modified_gmt":"2026-09-07T08:15:47","slug":"500-organizations-breached-as-medusa-ransomware-spreads-through-critical-u-s-infrastructure","status":"publish","type":"post","link":"https:\/\/cryptomag.finance\/?p=50635","title":{"rendered":"500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure"},"content":{"rendered":"

\"\"<\/p>\n

A ransomware group is expanding its attacks on U.S. critical infrastructure after hitting more than 500 organizations.<\/p>\n

Federal agencies say the ransomware-as-a-service variant has now affected sectors including healthcare, defense, manufacturing, government services, information technology and financial services,\u00a0says<\/a>\u00a0CISA.<\/p>\n

The update to advisory AA25-071A marks an increase from the more than 300 victims noted in the March of 2025 version.<\/p>\n

Medusa actors use a double-extortion approach that encrypts systems and threatens to release stolen data unless a ransom is paid.<\/p>\n

The group operates opportunistically by exploiting unpatched software and has shifted to an affiliate model since early 2023.<\/p>\n

Payments to initial access brokers range from $100 to $1 million.<\/p>\n

The Healthcare and Public Health sector has been hit especially hard.<\/p>\n

Recommended mitigations include timely patching of software and firmware, network segmentation and blocking untrusted access to remote services.<\/p>\n

Follow us on X<\/a>, Facebook<\/a> and Telegram<\/a><\/span><\/em>
\n
\nDon’t Miss a Beat \u2013 Subscribe<\/a> to get email alerts delivered directly to your inbox <\/span><\/em>
\n<\/p>\n

\n
<\/div>\n

&nbsp<\/p>\n

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.<\/h6>\n<\/div>\n

Generated Image: Midjourney<\/em><\/span><\/p>\n

The post 500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure<\/a> appeared first on The Daily Hodl<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"

A ransomware group is expanding its attacks on U.S. critical infrastructure after hitting more than 500 organizations. Federal agencies say the ransomware-as-a-service variant has now affected sectors including healthcare, defense, manufacturing, government services, information technology and financial services,\u00a0says\u00a0CISA. The update to advisory AA25-071A marks an increase from the more than 300 victims noted in the […]<\/p>\n","protected":false},"author":1,"featured_media":50636,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"class_list":["post-50635","post","type-post","status-publish","format-standard","has-post-thumbnail"],"yoast_head":"\n500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure - Cryptomag<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptomag.finance\/?p=50635\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure - Cryptomag\" \/>\n<meta property=\"og:description\" content=\"A ransomware group is expanding its attacks on U.S. critical infrastructure after hitting more than 500 organizations. Federal agencies say the ransomware-as-a-service variant has now affected sectors including healthcare, defense, manufacturing, government services, information technology and financial services,\u00a0says\u00a0CISA. The update to advisory AA25-071A marks an increase from the more than 300 victims noted in the […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptomag.finance\/?p=50635\" \/>\n<meta property=\"og:site_name\" content=\"Cryptomag\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-07T08:15:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dailyhodl.com\/wp-content\/uploads\/2025\/09\/ransomware-criminal-who.jpg?resize=1024,600\" \/>\n<meta name=\"author\" content=\"Crypto Magazine\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:site\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Crypto Magazine\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=50635#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=50635\"},\"author\":{\"name\":\"Crypto Magazine\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"headline\":\"500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure\",\"datePublished\":\"2026-09-07T08:15:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=50635\"},\"wordCount\":276,\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=50635#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/ransomware-criminal-who-B5Mcnq.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=50635\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?p=50635\",\"name\":\"500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure - Cryptomag\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=50635#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=50635#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/ransomware-criminal-who-B5Mcnq.jpg\",\"datePublished\":\"2026-09-07T08:15:47+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=50635#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cryptomag.finance\\\/?p=50635\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=50635#primaryimage\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/ransomware-criminal-who-B5Mcnq.jpg\",\"contentUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/ransomware-criminal-who-B5Mcnq.jpg\",\"width\":1024,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=50635#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cryptomag.finance\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/\",\"name\":\"Cryptomag\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cryptomag.finance\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\",\"name\":\"Crypto Magazine\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"caption\":\"Crypto Magazine\"},\"sameAs\":[\"https:\\\/\\\/cryptomag.finance\",\"https:\\\/\\\/x.com\\\/cryptomagz\"],\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure - Cryptomag","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptomag.finance\/?p=50635","og_locale":"en_US","og_type":"article","og_title":"500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure - Cryptomag","og_description":"A ransomware group is expanding its attacks on U.S. critical infrastructure after hitting more than 500 organizations. Federal agencies say the ransomware-as-a-service variant has now affected sectors including healthcare, defense, manufacturing, government services, information technology and financial services,\u00a0says\u00a0CISA. The update to advisory AA25-071A marks an increase from the more than 300 victims noted in the […]","og_url":"https:\/\/cryptomag.finance\/?p=50635","og_site_name":"Cryptomag","article_published_time":"2026-09-07T08:15:47+00:00","og_image":[{"url":"https:\/\/dailyhodl.com\/wp-content\/uploads\/2025\/09\/ransomware-criminal-who.jpg?resize=1024,600","type":"","width":"","height":""}],"author":"Crypto Magazine","twitter_card":"summary_large_image","twitter_creator":"@cryptomagz","twitter_site":"@cryptomagz","twitter_misc":{"Written by":"Crypto Magazine","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cryptomag.finance\/?p=50635#article","isPartOf":{"@id":"https:\/\/cryptomag.finance\/?p=50635"},"author":{"name":"Crypto Magazine","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"headline":"500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure","datePublished":"2026-09-07T08:15:47+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=50635"},"wordCount":276,"image":{"@id":"https:\/\/cryptomag.finance\/?p=50635#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/ransomware-criminal-who-B5Mcnq.jpg","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cryptomag.finance\/?p=50635","url":"https:\/\/cryptomag.finance\/?p=50635","name":"500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure - Cryptomag","isPartOf":{"@id":"https:\/\/cryptomag.finance\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=50635#primaryimage"},"image":{"@id":"https:\/\/cryptomag.finance\/?p=50635#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/ransomware-criminal-who-B5Mcnq.jpg","datePublished":"2026-09-07T08:15:47+00:00","author":{"@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"breadcrumb":{"@id":"https:\/\/cryptomag.finance\/?p=50635#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptomag.finance\/?p=50635"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptomag.finance\/?p=50635#primaryimage","url":"https:\/\/cryptomag.finance\/wp-content\/uploads\/ransomware-criminal-who-B5Mcnq.jpg","contentUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/ransomware-criminal-who-B5Mcnq.jpg","width":1024,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/cryptomag.finance\/?p=50635#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptomag.finance\/"},{"@type":"ListItem","position":2,"name":"500 Organizations Breached as Medusa Ransomware Spreads Through Critical U.S. Infrastructure"}]},{"@type":"WebSite","@id":"https:\/\/cryptomag.finance\/#website","url":"https:\/\/cryptomag.finance\/","name":"Cryptomag","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptomag.finance\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040","name":"Crypto Magazine","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","caption":"Crypto Magazine"},"sameAs":["https:\/\/cryptomag.finance","https:\/\/x.com\/cryptomagz"],"url":"https:\/\/cryptomag.finance\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/50635","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=50635"}],"version-history":[{"count":0,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/50635\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/media\/50636"}],"wp:attachment":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=50635"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=50635"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=50635"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}