Addison Saws listed on Medusa ransomware leak site

• Ransomware group: Medusa
• Country: United Kingdom
• Sector: Manufacturing
• Announcement date: January 29, 2025

Medusa ransomware group claims attack on Addison Saws

The Medusa ransomware group has officially listed the United Kingdom-based manufacturing company Addison Saws on its leak site. The announcement, which appeared on January 29, 2025, indicates that the threat actor group claims to have successfully obtained data from the organization. This development marks a significant escalation in the threat profile facing the company, as the group has utilized its leak site to signal the breach.

The listing suggests that the organization may be facing a double extortion tactic. In such scenarios, ransomware actors do not merely encrypt an organization's internal systems to disrupt operations; they also exfiltrate sensitive information with the intent of threatening its public release. This dual-layered approach is designed to maximize pressure on the victim by combining operational paralysis with the threat of reputational and legal consequences stemming from data exposure.

Details of the alleged breach

According to the announcement made by the Medusa group, the attack was claimed to have occurred on January 29, 2025. Despite the listing on the leak site, the group has not provided specific information regarding the volume of the alleged leaked data or the specific file count involved in the incident. Furthermore, no ransom demand has been publicly stated in the announcement.

Regarding the specific content of the breach, the listing provides no information regarding the nature of the data that was allegedly stolen. At this time, there are no screenshots or proof files available on the leak site to substantiate the group's claims or to provide visibility into the types of files that may have been compromised.

• No specific data types have been named in the listing.

About Addison Saws

Addison Saws is an industrial company based in the United Kingdom. Founded in 1956, the organization specializes in providing various industrial metal cutting solutions. Their product portfolio includes essential machinery for the metal cutting industry, such as bandsaws, cold saws, tube benders, and laser cutters.

Potential impact and organizational risks

This incident may lead to significant operational disruptions and reputational damage for Addison Saws. Because the company is based in the United Kingdom, a potential data breach of this nature could trigger various legal obligations under the UK GDPR framework. The use of double extortion methods by the Medusa group creates secondary risks, as the threat of publishing sensitive information can expose employees and customers to risks such as identity theft or highly targeted phishing attacks.

The Medusa group has been active since 2021 and frequently utilizes leak sites to exert pressure on their targets. For organizations operating within the manufacturing sector, such incidents highlight the necessity of reviewing and strengthening data security protocols. To defend against such threats, organizations typically focus on robust backup strategies, strict access controls, and continuous monitoring of their network environments to detect unauthorized data exfiltration before it can be leveraged for extortion.