Ransomware Group: MEDUSA

VICTIM NAME: Indus Towers

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the MEDUSA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page detailing the incident involving Indus Towers, a telecommunications infrastructure provider based in Gurgaon, India, was published on January 14, 2025. Indus Towers has been recognized for its essential role in managing telecom towers and networks across India, significantly impacting the telecommunications landscape. The site highlights the organization’s operations, noting that it employs approximately 3,554 individuals. The information extracted from the leak indicates potential compromises affecting user data and highlights the group’s activity titled “medusa.” The details regarding the exposure of data and the specific types of sensitive information compromised remain unspecified.

The leak page also provides insight into the scale of the incident, listing the involvement of various stakeholders, including approximately 365 users, 20 employees, and interaction with 80 third-party entities. The enumeration of URLs related to users and third parties underscores the potential breadth of the data breach. Additionally, the presence of a screenshot related to the incident signifies that visual evidence of the compromise has been captured, although it is presented in a generalized manner without explicit sensitive details. Further investigations may be required to assess the full impact of the incident on the affected users and third parties.