MeduzaLocker
Data as of September 2, 2026.
What industries MeduzaLocker targets
Sector identified for 2 of 4 victims.
| Manufacturing | 1 | |
| Technology | 1 |
Where the victims are located
Country identified for all 4 victims.
| Germany | 2 | |
| United States | 1 | |
| Canada | 1 |
Every MeduzaLocker victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| FunkeScheid funkescheid.com | Not identified | Germany | Sep 2, 2026 |
| Lawter lawter.com | Manufacturing | United States | Sep 2, 2026 |
| T-Online t-online.com | Not identified | Germany | Sep 2, 2026 |
| Twal Family IT Lab twalfamily.com | Technology | Canada | Sep 2, 2026 |
Browse recent data breaches for more.
MeduzaLocker leak site
The address we've seen MeduzaLocker publish victims from. Any .onion address needs the Tor Browser.
t33zoj4qwv455fog7qnb2azi5xcdxkixughmmduzbw2rtdgryqfbh6id.onion
MeduzaLocker questions
Is MeduzaLocker still active?
Yes. MeduzaLocker posted its most recent victim on September 2, 2026. That's 4 victims in the last 30 days.
How many victims has MeduzaLocker claimed?
MeduzaLocker has named 4 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did MeduzaLocker first appear?
The first victim we recorded for MeduzaLocker was posted on September 2, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Has MeduzaLocker already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.