Medusa Ransomware

The average cost of a Medusa ransomware attack is around £500,000, though minor data breaches, such as those involving email, may cost about £50,000. You will face a choice: keep the environment unchanged for forensic analysis or push for rapid recovery to reduce business disruption. Waiting too long to identify and fix breaches usually increases the costs.

Most cyber insurance claims cover investigation, legal advice, business interruption, and sometimes ransom payments. However, each policy is different and often requires detailed evidence and validation. Insurance is vital for recovery, but cyber insurance is a fast-changing field, and you should check the details of your policy.

Yes. If any of the stolen or lost data includes personal information about your customers, you are legally required to protect it, even if it has been compromised by a ransomware attack. In most cases, you must also notify the Information Commissioner’s Office (ICO): ico.org.uk.

You should also inform your insurer and may wish to seek legal advice on further notification requirements. Zensec is experienced in supporting organisations through these steps and can help you manage communications with insurers, legal counsel, regulators, and customers during this difficult time.

The NCSC is the UK National Cyber Security Centre. They provide cyber security guidance and support, helping to make the UK the safest place to live and work online. They have defined a Cyber Incident Response procedure and they have approved and accredited suppliers to provide this service.

https://www.ncsc.gov.uk/

As a recognised Assured Service Provider by the National Cyber Security Centre (NCSC), Zensec provide comprehensive cyber risk management services that are designed to Protect, Detect & Mitigate cyber security threats across the UK.

Report Fraud is the UK's national reporting centre for fraud and cybercrime. Whether you have been scammed, defrauded, or experienced cybercrime in England, Wales, or Northern Ireland, Report Fraud offers a central point of contact for information on fraud and financially motivated cybercrime.

https://www.reportfraud.police.uk/https://www.actionfraud.police.uk/

It can be tempting to pay the ransom, especially with business operations at risk and clients waiting. However, paying Medusa or any ransomware group rarely results in a good outcome. Your data may still be published or sold, and further ransom demands can follow. Your best option is to involve a professional ransomware incident response team with experience handling Medusa ransomware.

The NCSC provides guidance on ransomware payments:
Read the NCSC’s advice

Important: It is a criminal offence to pay money to those on the UK financial sanctions list.
Check the current list here:
UK government financial sanctions list