CyberHappenings logo

Track cybersecurity events as they unfold. Sourced timelines, daily updates. Fast, privacy‑respecting. No ads, no tracking.

Medusa Ransomware Gang Targets BBC Correspondent for Insider Access

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

The Medusa ransomware group attempted to recruit a BBC cybersecurity correspondent to gain access to the BBC's internal network. The threat actors offered a significant financial incentive to the journalist, Joe Tidy, to act as an insider threat. The group planned to use Tidy's laptop to breach the BBC's network, steal valuable data, and demand a ransom. The recruitment attempt involved multiple offers and attempts to persuade Tidy, including promises of anonymity and substantial financial rewards. The BBC correspondent did not comply and reported the incident to the BBC's information security team. The threat actors used MFA bombing tactics to try and gain access but were unsuccessful.

Timeline

  1. 29.09.2025 20:31 1 articles · 11h ago

    Medusa Ransomware Group Attempts to Recruit BBC Correspondent

    In July 2025, the Medusa ransomware group contacted BBC cybersecurity correspondent Joe Tidy over Signal, offering him a financial incentive to act as an insider threat. The group planned to use Tidy's laptop to breach the BBC's network, steal valuable data, and demand a ransom. Tidy reported the incident to the BBC's information security team and was disconnected from the organization's infrastructure. The threat actors used MFA bombing tactics to try and gain access but were unsuccessful.

    Show sources

Information Snippets