2026 ActionAid / TACOSA — MedusaLocker leak-site victim listing (May)
Data compromised
Uncategorized pending NGO or law-enforcement-grade disclosure
Technical writeup
Threat-intel and specialist blogs in early May 2026 referenced MedusaLocker-branded leak-site activity naming ActionAid alongside TACOSA-marked infrastructure—a pattern NGO observers treat seriously for donor and beneficiary safety even when corporate press releases lag ransomware forum optics.
Root cause
Ransomware or double-extortion operation per leak-site/OSINT summaries