Ransomware Group: MEDUSA

VICTIM NAME: Østerås Bygg

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the MEDUSA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page for Østerås Bygg, a construction company based in Norway, provides a detailed overview of a significant data breach that occurred. The incident involved the exposure of 125.50 GB of data, although specific types of data are not disclosed due to the nature of the report. The compromise was discovered on October 11, 2024, which indicates ongoing risks in data security practices within the construction industry. Østerås Bygg specializes in the production and installation of climatic walls, facades, and other structural elements, highlighting their critical role in building operations.

The leak is attributed to the ‘medusa’ group, known for targeting various sectors, including construction. While exact contents of the leak are not detailed due to privacy considerations, the page includes a screenshot that provides a visual context of the information available to potential threat actors. This incident underscores the importance of stringent cybersecurity measures, especially in industries dealing with significant physical infrastructures and sensitive internal data. Østerås Bygg’s corporate office is situated in 13 Hovfaret, Oslo, where they conduct operations related to their service offerings. As this breach became known, the company may need to assess and enhance its cybersecurity framework to prevent future incidents.