Ransomware Group: MEDUSA

VICTIM NAME: AVI Southeast

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the MEDUSA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

On January 14, 2025, details regarding AVI Southeast, a prominent audio visual system integrator in the United States, were leaked on a ransomware forum. With over 20 years of experience, AVI Southeast specializes in design, installation, and customer support across the southeastern region and nationwide. The breach was reportedly executed by a group referred to as “medusa.” Unfortunately, specific compromise dates were not disclosed, but the information has emerged concurrently with the leak publication date.

The extracted information reveals associations with various employees and third-party vendors. In total, the breach mentions 2 employees, 3 users, and 3 third-party entities. Additionally, it refers to 15 domains related to these third parties. Although no specific download links were provided, the presence of user and third-party data highlights potential risks to the affected parties. The company’s operational base is located in Eden Prairie, Minnesota, and it employs around 1,000 individuals. The information suggests a significant impact on AVI Southeast’s reputation and cybersecurity posture following this incident.