RANSOMWARE VICTIMGOVERNMENTDUPLICATE CLAIM

Thunder Bay Counselling

medusa📍 Canada (CA)📅 December 13, 2025
8
same group

Attack Intelligence

Thunder Bay Counselling was compromised in a ransomware attack attributed to medusa in December 2025. The organization, operating in the Government sector in Canada, was added to the group's data leak site as part of an extortion campaign.

medusa operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Thunder Bay Counselling is a leading provider of personal and workplace support services, offering counselling, psychotherapy, education, and support to facilitate positive life changes. Their services cater to individuals, families, and businesses, addressing issues related to mental health, substance use, and workplace challenges. The organization is committed to providing accessible, high-quality care that respects the diverse needs of the community. With a focus on social inclusion and shared responsibility, Thunder Bay Counselling aims to promote individual and community wellness. The company headquarters is located in 544 Winnipeg Avenue, Thunder Bay, Ontario, P7B 3S7, Canada. 11-50 Employees

Additional Details

ransom
100000

Other Victims — medusa (8)

Quick Facts

CountryCanada (CA)
SectorGovernment
Attack DateDec 13, 2025
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

medusa
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.