NASCAR did not respond to requests for comment in April when the Medusa ransomware gang added the company to its leak site and demanded a $4 million ransom. Rebecca Moody, head of data research at the cybersecurity firm Comparitech, said Medusa is among the top 10 most prolific ransomware strains this year so far, with 106 attacks claimed and 19 that have been confirmed. Medusa claimed to have exfiltrated gigabytes of company data and set a deadline of April 19 for ransom payment. In addition to attacks on the Pacific island nation of Tonga, it has targeted municipalities in France and government agencies in the Philippines, as well as a technology company created by two of Canada’s largest banks. For more than four years, the group has terrorized governments and companies — gaining notoriety for an attack on Minneapolis Public Schools that exposed troves of sensitive student documents impacting more than 100,000 people. “The investigation determined that the unauthorized actor acquired certain files on the Company’s network between March 31 and April 3, 2025,” NASCAR said. Founded in 1948, the Daytona Beach-based company operates as an auto racing sanctioning body that organizes more than 1,500 races across the U.S. each year. NASCAR warned customers this week of a data breach caused by a cyberattack in March. NASCAR, an acronym for the National Association for Stock Car Racing, said its IT team identified a cyberattack on April 3 and began an investigation. In late June, the company determined that Social Security numbers had been exposed. The group’s attack on Bell Ambulance affecting more than 100,000 people is one of this year’s biggest data breaches, she said. In filings with regulators in Maine, New Hampshire and Massachusetts, the company declined to say how many people were affected. Breach notification letters were sent out to victims on July 24, and victims are being given one year of credit monitoring services.
This Cyber News was published on therecord.media. Publication date: Sun, 27 Jul 2025 21:44:03 +0000