A ransomware attack by the threat actor medusalocker targeted dulay.ca in Canada, demanding a ransom of $40,000 for the 500GB of encrypted files, with additional options for profit from the data included in the deal. The incident highlights a significant cybersecurity threat in Canada. #Canada
Incident Details
- Victim: dulay.ca
- Country: CA
- Actor: medusalocker
- Source: http://z6wkgghtoawog5noty5nxulmmt2zs7c3yvwr22v4czbffdoly2kl4uad.onion/?p=463
- Discovered: 2025-11-18 00:33:56.873836
- Published: 2025-11-17 23:12:26.000000
Information
- The ransomware victim is dulay.ca, located in Canada.
- The threat actor involved is medusalocker.
- The ransom price is $40,000, with options to profit from the files included in the deal.
- The compromised data amounts to 500GB.

Disclaimer: This post is based on public claims made by the ransomware group "medusalocker". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.