Ransom! Aldagi

The ransomware claim alleges that the threat actor Medusa targeted Aldagi, a leading Georgian insurance company, resulting in the leak of 300.8 GB of data. The impacted country is Georgia.

Incident Details

  • Victim: Aldagi
  • Country: GE
  • Actor: medusa
  • Source: http://xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion/detail?id=f65e9e6e8e02e0d6513eedb8185b396f
  • Discovered: 2025-08-27 13:43:16.350712
  • Published: 2025-08-26 18:46:28.000000

Information

  • Aldagi is a leading insurance company in Georgia, established in 1990.
  • The company offers over 80 insurance products, including auto, property, life, health, travel, agricultural, and liability insurance for individuals and businesses.
  • In 2022, Aldagi launched Aldagi RE, becoming the first insurer in Georgia and the Caucasus to operate in reinsurance.
  • The company is recognized for its financial strength, innovation, and excellent customer service.
  • Aldagi partners with global leaders such as Swiss Re and Lloyd’s.
  • The company has over 500 employees and emphasizes teamwork, sustainability, and digital transformation.
  • Headquartered at Anna Politkovskaya Street №16, 0186, Tbilisi, Georgia.
  • The ransomware attack involved data leakage totaling 300.8 GB.

Disclaimer: This post is based on public claims made by the ransomware group "medusa". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live