MedusaLocker Claims Twal Family IT Lab as a Victim

Summary
Ransomware.live lists Twal Family IT Lab as a MedusaLocker victim, alleging impact to a personal home lab using VMware vSphere and multiple Active Directory domains. The post says the claim is unconfirmed.
Key points
- The record attributes a ransomware claim against Twal Family IT Lab to MedusaLocker and includes a leak-site reference.
- The post describes the target as a personal home lab, not a corporate or enterprise environment.
- It alleges the lab used VMware vSphere and multiple Active Directory domains; the post does not independently confirm the incident.
- The post says prior reporting mistakenly linked the victim to forces[.]gc[.]ca.
Article Details
- Victim
- Twal Family IT Lab
- Victim Domain
- twalfamily.com
- Encryption Status
- Unknown
- Encrypted Size
- Unknown
- Exfiltration Status
- Unknown
- Exfiltrated Data
- Unknown
- Exfiltrated Size
- Unknown
- Ransom Demand
- Unknown
- Leak Status
- Unknown; the source reports a public ransomware-group claim but does not establish that data was leaked or published.
Threat Actors
Malware
Products
Microsoft Active DirectoryTwal Family IT Lab’s personal home lab in the twalfamily.com AD environment was impacted by the medusalocker ransomware, disrupting operations across VMware vSphere and multiple Active Directory domains.VMware vSphereTwal Family IT Lab’s personal home lab in the twalfamily.com AD environment was impacted by the medusalocker ransomware, disrupting operations across VMware vSphere and multiple Active Directory domains.
