Medusa has gone from 300 critical infrastructure victims to more than 500 — and it pays up to $1 million for a way in
2026-08-19Security
A joint CISA, FBI and HHS advisory puts Medusa past 500 US critical infrastructure organisations as of April 2026, up from 300-plus in March 2025. The number that explains the growth is not the victim count: it is the $100 to $1 million the operation pays initial access brokers.