FDC Interiors listed on Medusa ransomware leak site

• Ransomware group: Medusa
• Country: United Arab Emirates
• Sector: Manufacturing
• Announcement date: November 21, 2025

The Medusa ransomware group has officially listed the United Arab Emirates-based organization FDC Interiors on its dedicated leak site. According to the announcement made on November 21, 2025, the threat actors are demanding a ransom payment of 100,000 USD to prevent the release of stolen information.

The alleged cyberattack by Medusa

According to claims made by the Medusa group, the cyberattack against FDC Interiors was conducted on November 17, 2025. The group alleges that they successfully infiltrated the organization's systems and obtained sensitive data. To support their claims and pressure the victim, the group has shared screenshots that purportedly show the organization's internal operational files.

The threat actors have stated that they will proceed to publish the stolen information on their platform if the specified ransom demand is not met. This tactic is a hallmark of modern ransomware operations, where the threat is not merely the encryption of systems, but the public exposure of sensitive corporate and personal information.

Data involved in the claim

While the specific volume of data and the exact number of files have not been disclosed by the group, the shared screenshots suggest that the breach involves a variety of sensitive internal information. The content of the leaked screenshots appears to include files related to the internal operations of the company, as well as documentation regarding materials and personnel.

The specific categories of data allegedly compromised include:

• Employee data
• Operational files
• Material and inventory lists

About FDC Interiors

FDC Interiors is a company based in the United Arab Emirates that specializes in luxury and innovative interior design. The firm provides comprehensive turnkey services, managing projects from the initial conceptualization stage through to final completion. They focus on creating high-quality and aesthetic living spaces for a variety of prestigious brands.

Impact and organizational risks

This claim carries significant implications for the organization's operational continuity and its commercial reputation. The alleged compromise of employee and operational data introduces several secondary risks. For instance, the exposure of staff information could lead to identity theft or make employees targets for highly specific, targeted phishing attacks.

Furthermore, the Medusa group utilizes a double-extortion methodology. This approach involves both encrypting data to disrupt business and threatening to leak data to cause reputational or legal damage. In this context, if the leaked data is made public, the organization may face the disclosure of trade secrets, which could impact its competitive standing.

Given the regulatory environment in the United Arab Emirates, the organization may also face specific legal obligations regarding data protection and breach notification. For organizations operating in the manufacturing and design sectors, such incidents underscore the necessity of maintaining robust security infrastructures. General defensive measures often include implementing strict access controls, regular security audits, and maintaining close cooperation with relevant legal and cybersecurity authorities to mitigate the impact of such threats.