Ransomware Group: MEDUSA

VICTIM NAME: Greenwich Medical Spa

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the MEDUSA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

Greenwich Medical Spa, a consumer services organization that specializes in injectables, body contouring, laser hair removal, and skin rejuvenation, has been the subject of a ransomware data leak. Founded in 2005, the spa offers a range of aesthetic services and is located in Riverside, Connecticut. As of the discovery date on February 10, 2025, the corporate office employs 23 individuals. The data leak has raised concerns regarding the security of sensitive operational data which may have been compromised by the ransomware group known as Medusa.

The ransomware leak page published on February 10, 2025, includes a screenshot depicting content related to Greenwich Medical Spa, enhancing the urgency of addressing potential vulnerabilities within the organization. While specific download links to sensitive data are not disclosed here, the presence of such links implies that unauthorized access to confidential information may have occurred. The repercussions of this incident necessitate immediate attention to cybersecurity measures to protect client and company data from future breaches.