Ransomware Group: MEDUSA

VICTIM NAME: Albany College of Pharmacy

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the MEDUSA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page related to Albany College of Pharmacy and Health Sciences (ACPHS) details various aspects of the data breach incident that occurred on October 8, 2024. The institution, which is situated in Albany, New York, is noted for its focus on education, catering to approximately 900 students and employing around 434 staff members. The compromise appears to have been orchestrated by a group known as Medusa, which is known for targeting educational institutions among other sectors. The leak contains information about internal operations and employee data, indicating that a notable number of user accounts, as well as employee information, have been exposed as part of this incident.

Specific details regarding the number of users affected are outlined, with 43 users and 4 employees specifically noted in the compromised data. The page indicates that third-party entities are also involved, suggesting that the breach may extend beyond just the internal data of ACPHS. Furthermore, updates post-compromise mention modifications to the website and the activity of information gathering, with timestamps indicating rapid developments in the aftermath of the attack. While no downloadable content or specific links were available directly on the leak page, it is suggested that there may be access points for sensitive information. Such incidents highlight the ongoing vulnerabilities faced by institutions within the educational sector.