MEDUSA RANSOMWARE CLAIMS COMCAST DATA BREACH, DEMANDS $1.2M

Summary from the TLDR InfoSec newsletter

The Medusa ransomware group claims to have exfiltrated 834.4 GB of data from Comcast Corporation and is demanding $1.2 million either as ransom for deletion or as a sale price to interested buyers. As proof, the attackers posted approximately 20 screenshots of alleged internal files, along with a listing of 167,121 file entries containing actuarial reports, insurance modeling scripts, claim analytics, and product management data, including files such as Python and SQL scripts related to auto premium analysis. Comcast has not confirmed or denied the breach. It experienced a credential leak in 2015 that affected over 200,000 users. The breach was attributed to credential aggregation and not a system breach.