Skip to content
Submit incident
DII-2026-00053
ReportedReported by fewer than three independent publishers, with no official finding.

Lazarus hackers adopt Medusa ransomware for extortion campaigns, targeting healthcare and nonprofits

A joint investigation by the Symantec and Carbon Black Threat Hunter teams details evidence that operators linked to the Lazarus hacker group are deploying Medusa ransomware in ongoing extortion campaigns targeting...

24 February 2026 · Ransomware and extortion
24 February 2026
DII-2026-000535 sources ↓
Quick facts
Category
Ransomware and extortion
Source
DataBreaches.net
Date
24 February 2026
Drafted by
Raidu Incident Detection

What happened

Not publicly disclosed.

Classification

Category
Ransomware and extortion
Industry
Healthcare

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

DataBreaches.net
Lazarus hackers adopt Medusa ransomware for extortion campaigns, targeting healthcare and nonprofits
24 February 2026
industrialcyber.co
Medusa ransomware
security.com
titled
industrialcyber.co
deploying
industrialcyber.co
Industrial Cyber