Rad-Solutions, LLC targeted by Medusa ransomware group
The Medusa ransomware group claims to have compromised data belonging to Rad-Solutions, LLC and has published it on their leak site.
- Published
- 2 min read
- 2 min read
- Ransomware group: Medusa
- Country: United States
- Sector: Manufacturing
- Announcement date: September 8, 2025
Medusa ransomware group claims breach of Rad-Solutions, LLC
The Medusa ransomware group has claimed responsibility for a cyberattack against Rad-Solutions, LLC. According to an announcement made on the group's leak site on September 8, 2025, the threat actors assert that they have successfully compromised data belonging to the organization and have subsequently published it online.
Details of the claimed attack
The Medusa group stated that the cyberattack against Rad-Solutions, LLC occurred on September 6, 2025. Following the intrusion, the group listed the organization's data on their dedicated leak site to pressure the victim. As part of their public announcement, the group has shared several document samples that are alleged to belong to the organization's operational processes.
The provided screenshots and samples include various tables that reportedly contain sensitive information. The specific types of data identified in the listing include:
- Order records
- Shipment details
- Financial data
The group has issued a ransom demand of 100,000 USD in connection with this incident.
About Rad-Solutions, LLC
Rad-Solutions, LLC is a North American company that specializes in a variety of chemical and material science products. The company is focused on energy-curable raw materials, specialty coatings, and innovative products designed for multiple industries, including the cosmetics and graphic arts sectors. Their product portfolio includes the supply of oligomers, acrylate diluents, and adhesion promoters. Additionally, the company provides formulation support and various contract manufacturing services to its clients.
Impact and industry implications
The Medusa group is recognized for utilizing double-extortion tactics, a method where attackers not only encrypt an organization's data but also steal it to threaten public exposure. This specific breach may lead to the exposure of the company's trade secrets and sensitive customer information. Because the organization is based in the United States, the incident may trigger state-level data breach notification laws.
The potential consequences of this incident extend beyond the organization itself. The company's customers and supply chain partners could face an increased risk of targeted phishing attacks resulting from the exposure of this data. If the ransom demand is not met, the group has indicated they may publish the full dataset, which could lead to significant reputational damage and operational disruptions for the company.
In general, ransomware attacks of this nature highlight the ongoing risks faced by the manufacturing sector. Organizations in this industry often deal with complex supply chains and proprietary formulations, making them attractive targets for extortion. To mitigate such risks, organizations typically focus on robust defensive measures, such as implementing multi-factor authentication, maintaining offline backups, and conducting regular security awareness training to defend against phishing and other initial access vectors.