type: incident · created: 2026-08-19 · updated: 2026-08-19 · tags: [incident, ransomware, medusa, cisa, advisory] · confidence: high · affected_sectors: [government, healthcare, finance, technology] · au_impact: true
Medusa Ransomware Tallying Hundreds of New Victims; CISA Updates Tactics
CISA identified more than 200 victims of the Medusa ransomware operation over the last year and updated its advisory on the group's tactics, techniques and procedures.
| Attribute | Detail |
|---|---|
| Scope | 200+ Medusa victims over the past year |
| Action | CISA updated advisory on Medusa TTPs |
| Impact | Fresh detection guidance for defenders |
| Verification | Confirmed — CISA/agency advisory |
| Source | CISA (via outlet) — Tier 1/4 |
The updated advisory reflects a continuing and high-volume Ransomware-as-a-Service targeting pattern and gives defenders fresh detection guidance, in line with CISA's ongoing KEV and advisory cadence.