[MEDUSA] – Ransomware Victim: Oscars Group

AI Generated Summary of the Ransomware Leak Page

Oscars Group, a long-standing hospitality operator in New South Wales, appears on a ransomware leak page as a victim. The organization manages an expansive portfolio of more than 35 venues, including pubs, hotels, accommodations, and events centers, with activities spanning gaming, retail liquor, and residential developments. The leak post identifies Oscars Group as a victim and frames the incident as a ransomware intrusion with data exfiltration, though the available data does not explicitly confirm whether systems were encrypted or if data was released. The post date is November 5, 2025; since a definitive compromise date isn’t provided in the data, this date is treated as the post date. The page gates further content behind a human verification step (CAPTCHA), and there is an indicator that a claim URL is present for ransom-related information, though the actual link is not shown in this record. The description notes the organization’s headquarters in New South Wales, Australia, with exact street details redacted for this report. No images or screenshots are documented on the page.

From a threat-actor perspective, the leak entry provides limited detail beyond the victim’s identity and operational footprint. There is no explicit ransom figure or confirmation of encryption versus data leakage in the visible excerpt, and the record shows zero images or screenshots on the page. The presence of a claim URL indicator suggests the attackers intend to direct readers to ransom-related content, but the actual URL is not disclosed here. Oscars Group is described as having fewer than 25 employees while operating more than 35 hospitality venues, which implies that any impact could be distributed across multiple properties in New South Wales. In the absence of concrete data size, data types, or a stated ransom amount, the current record should be treated as a data-leak-adjacent extortion post with typical gating and external-link prompts, warranting continued monitoring for corroborating information and follow-up disclosures.