Medusa ransomware attacks in India

Medusa has posted 8 Indian organisations on its leak site since Mar 2023. Its latest Indian post was in Oct 2025. The sector it hits most often in India is technology.

8Indian victims posted, all time
0in the past 12 months
Mar 2023first Indian post
Oct 2025latest Indian post

Indian victims by month

1111Nov 2024Nov 2025Oct 2026

Red bars are the past 12 months.

Sectors hit in India, all time

Indian victims by year

  • 20254
  • 20234

Other gangs active in India

Leak-site counts from ransomware.live’s public data for victims with country India, as of 16 Oct 2026. A post is a claim made by a criminal group, not a confirmed breach, and the real number of attacks is higher. Victims are never named on this site. See the method.