More than 200 victims of Medusa ransomware identified over the last year, CISA says

Federal cybersecurity agencies, including CISA and the FBI, reported over 500 victims of the Medusa ransomware group as of April 2026, with a focus on healthcare and critical infrastructure sectors. The group rapidly exploits newly disclosed vulnerabilities and employs an affiliate model, complicating defensive efforts.

This Wire brief sits within Fusion42's coverage of Healthtech Infrastructure.