Seznam listed on Medusalocker ransomware leak site

• Ransomware group: Medusalocker
• Country: Czechia
• Sector: Technology
• Announcement date: September 23, 2026

Medusalocker claims to have compromised Seznam

The Medusalocker ransomware group has officially listed the technology organization Seznam on its dedicated leak site. According to the announcement, the group alleges that it has successfully infiltrated the systems of the Czech-based firm. This development marks a new instance of a ransomware group targeting a significant entity within the digital services landscape.

The announcement regarding this incident was published on September 23, 2026. While the group has claimed responsibility for the attack, it is important to note that the claims are made by the threat actor via their leak site. In many modern ransomware campaigns, groups utilize these platforms to exert pressure on victims through a tactic known as double extortion. In such scenarios, attackers not only encrypt an organization's data to disrupt operations but also threaten to release sensitive information publicly to coerce the victim into paying a ransom.

Details of the alleged data breach

The Medusalocker group has made specific claims regarding the nature of the data they have allegedly obtained from Seznam. According to the group's announcement, the breach involves a specific set of user information. The group asserts that they have obtained the following data from the organization's systems:

• Email addresses

Despite the claim of a data leak, the evidence provided by the group remains limited. The screenshot associated with the announcement contains only a browser verification page. Consequently, the group has not provided any visual evidence or direct documentation to substantiate the claim that the data has indeed been exfiltrated from the organization's infrastructure.

About Seznam

Seznam.cz is a prominent internet portal, search engine, and email service provider located in the Czech Republic. As one of the largest digital media and technology companies operating within the country, it provides a wide variety of online services to its user base. Given its scale and the nature of its services, the organization serves as a significant player in the regional technology sector.

Risk assessment and organizational implications

This incident may pose a significant risk to the privacy of the organization's users. The allegedly leaked email addresses could be utilized by malicious actors for various purposes, such as phishing attacks or targeted fraud attempts. Such activities often exploit the trust established between a service provider and its users to gain further access or financial gain.

Because the organization operates within the Czech Republic, the situation may require evaluation under the General Data Protection Regulation (GDPR) within the European Union. Organizations facing such claims should carefully review their data breach notification obligations and consider the necessity of informing the affected users to mitigate potential harm.

Publicly available information regarding the Medusalocker group remains limited, making it difficult to determine their full scope of operations or specific methodologies. In general, organizations in the technology sector can defend against such threats by implementing robust security frameworks, maintaining strict access controls, and conducting regular audits of their data handling processes. Strengthening defensive postures and ensuring rapid incident response capabilities are essential steps for any entity managing large volumes of user data.