Medusa ransomware hits over 500 critical infrastructure sites, says federal advisory

Federal cybersecurity agencies have issued an updated advisory warning that the Medusa ransomware operation has compromised more than 500 critical infrastructure organizations as of April 2026, a significant increase from the 300 victims reported in early 2025.