Ransomware Group: MEDUSA

VICTIM NAME: Automha

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the MEDUSA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page for Automha reveals significant data theft affecting this manufacturing company, which specializes in atomized warehouse storage systems. Founded in 1979 and based in Lombardy, Italy, Automha has approximately 114 employees. The leaked data totals an alarming 308.9 GB, indicating a substantial breach of sensitive information. The compromise was publicly discovered on October 22, 2024. This incident was attributed to a group identified as “medusa,” known for targeting various organizations and demanding ransoms for the return of confidential data.

The page includes a screenshot showcasing internal documents, although specific details are not disclosed to protect sensitive information. Furthermore, the content suggests no employee or third-party data has been specifically highlighted in connection with the compromise, possibly indicating the nature of the information leaked is yet to be fully determined. The official website for Automha is listed as automha.com, but no interactive features such as download links are publicly available on the leak page. This incident underscores the ongoing risks faced by organizations within the manufacturing sector regarding data security and the importance of preventive measures.