Advance Tapes International listed on Medusa ransomware leak site

• Ransomware group: Medusa
• Country: United Kingdom
• Sector: Manufacturing
• Announcement date: March 22, 2025

Medusa ransomware group targets Advance Tapes International

The Medusa ransomware group has listed the United Kingdom-based manufacturing company Advance Tapes International on its dedicated leak site. According to the announcement made by the threat actors, the company has been targeted in a cyberattack that involves the potential exposure of sensitive information.

Details of the claimed attack

The Medusa group posted the listing on March 22, 2025. Through this announcement, the group claims to have successfully accessed the systems of Advance Tapes International on March 21, 2025. The threat actors are utilizing a ransom demand of $200,000 to pressure the organization into meeting their financial requirements.

Ransomware groups often use leak sites to increase pressure on their victims. This method is a key component of modern cyber extortion, where the threat of public data exposure is used as leverage to compel payment. By listing a victim publicly, the group aims to damage the organization's reputation and create urgency through the threat of a massive data leak.

Data involved in the incident

The listing provided by the Medusa group claims that approximately 128.70 GB of data has been involved in the incident. However, the group has not provided detailed information regarding the specific content or types of the leaked data; the available evidence consists of a screenshot displaying a verification page.

Because the specific contents of the files have not been detailed, the exact nature of the stolen information remains unconfirmed beyond the volume of data claimed by the attackers. The listing names no specific data types.

About Advance Tapes International

Advance Tapes International is a manufacturer based in the United Kingdom. Founded in 1964, the company specializes in the production of specialist pressure-sensitive adhesive tapes. The organization is involved in the development of various adhesive solutions designed for both industrial and professional applications.

Impact and risk assessment

The Medusa group is recognized as a Ransomware-as-a-Service (RaaS) structure that frequently employs double extortion tactics. In such scenarios, attackers do not just encrypt a company's systems but also steal sensitive data to threaten its public release. The leakage of an institution's data can lead to the exposure of critical employee and commercial information, creating significant operational and reputational risks.

For a UK-based organization, such an incident may trigger significant legal and regulatory implications. The company may face data protection obligations under the UK GDPR (General Data Protection Regulation). Furthermore, the exposure of data increases the risk of secondary attacks, such as targeted phishing or identity theft, against the organization and its stakeholders.

The group's historical activities suggest a pattern where data is shared publicly if the ransom demand is not met. To defend against such threats, organizations in the manufacturing sector often focus on implementing robust security measures, such as multi-factor authentication, regular offline backups, and continuous monitoring of network traffic to detect unauthorized access early.