East Baton Rouge Sheriff's Office Listed by medusa Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

When a local law-enforcement agency appears on a ransomware group's leak site, the practical concern for residents, employees, inmates, and anyone who has interacted with that agency is straightforward: internal files may have left the organisation's control. Public reporting places the East Baton Rouge Sheriff's Office on a listing attributed to the medusa ransomware group as of 29 March 2024. The number of people whose information may be involved remains unknown, and the precise contents of the files have not been independently confirmed. What is stated is that internal files were exfiltrated and that the total volume claimed is 92.2 GB. For ordinary people who live or work in East Baton Rouge Parish, that combination of volume and organisational role raises the possibility that personal, operational, or custodial records could be among the material.

This article sets out only what has been publicly reported, places the claim in context, and outlines the concrete steps people can take if they believe their data may have been exposed. No assumption is made that the listing has been verified by the Sheriff's Office or by independent investigators; it is treated as an unverified claim by the group.

Breaking down the breach

According to the available record, the East Baton Rouge Sheriff's Office was listed by the medusa ransomware group on or about 29 March 2024. The report states that internal files were exfiltrated in a ransomware attack and that the total amount of data leakage claimed is 92.2 GB. No further technical detail—such as the initial access method, the date of intrusion, the duration of access, or whether encryption was also deployed—has been disclosed in the material provided. The number of people affected is listed as unknown.

The listing itself is the primary public indicator. Ransomware groups commonly post victim names and sample data on dedicated leak sites to pressure payment; such postings are claims, not confirmed forensic findings. Nothing in the supplied facts establishes that the Sheriff's Office has publicly confirmed the incident, negotiated with the group, or recovered the data. Timing beyond the reported listing date, the exact scale of any compromise of systems, and the method of attack remain undisclosed.

Who is medusa?

Medusa is a ransomware operation that has been active in recent years and is known for double-extortion tactics: encrypting systems while also exfiltrating data and threatening to publish it if a ransom is not paid. The group typically operates a leak site where it names organisations and sometimes posts portions of stolen files. Public reporting on medusa has associated it with attacks across multiple sectors, including government and public-service entities, though each incident is distinct.

In this case, the group claims to have listed the East Baton Rouge Sheriff's Office and to have obtained 92.2 GB of internal files. No additional statements attributed specifically to medusa about this victim—such as ransom demands, deadlines, or sample file descriptions—are included in the facts. The listing should therefore be understood as the group's assertion rather than as independently verified fact.

About East Baton Rouge Sheriff's Office

The East Baton Rouge Sheriff's Office is a parish-level law-enforcement agency in Louisiana, led by Sheriff Sid Gautreaux. Its responsibilities include enforcing state and local laws within East Baton Rouge Parish and operating the East Baton Rouge Parish Prison. The corporate office is located at 100 Saint Ferdinand St Rm 203, Baton Rouge, Louisiana, 70802, and the organisation is reported to have approximately 510 employees.

Agencies of this type routinely handle sensitive operational information, personnel records, inmate data, investigative files, and records of interactions with the public. A breach involving such an organisation is consequential because the data it holds can affect not only employees and contractors but also residents who have filed reports, been detained, or otherwise come into contact with the justice system. The combination of public-safety functions and custodial responsibilities means that any unauthorised disclosure can carry both privacy and operational implications.

The information in question

The facts state that internal files were exfiltrated in a ransomware attack and that the claimed volume is 92.2 GB. No more granular inventory of data types—such as names, dates of birth, Social Security numbers, medical information, or case files—has been disclosed. Exact contents therefore remain unconfirmed.

Organisations of this kind typically maintain a range of records: employee and payroll data, inmate booking and housing information, incident and arrest reports, internal communications, and administrative documents. Whether any of those categories were present in the 92.2 GB claimed by the group is not established by the available reporting. Readers should treat the exposure of any specific personal data as possible but unconfirmed until official notices or independent analysis provide further detail.

The real-world impact

For individuals, the primary risks associated with a law-enforcement data exposure are identity theft, targeted fraud, and unwanted contact that leverages knowledge of prior interactions with the justice system. Even if highly sensitive identifiers are not present, internal documents can still reveal personal circumstances, addresses, or associations that criminals may exploit. Because the number of people affected is unknown, the scope of any such risk cannot be quantified from the public record.

For the organisation itself, the consequences can include operational disruption, the need to notify affected parties under applicable law, potential legal exposure, and the cost of forensic investigation and system remediation. Public trust in the confidentiality of law-enforcement and custodial records may also be affected. None of these outcomes is asserted as having already occurred; they are the ordinary categories of impact that follow from a claimed ransomware-related exfiltration of this size.

If your data was in this claimed breach

If you are an employee, former employee, inmate, or resident who has had dealings with the East Baton Rouge Sheriff's Office and are concerned that your information may have been among the internal files, begin with basic protective steps. Monitor financial accounts and credit reports for unexpected activity. Consider placing a fraud alert or credit freeze with the major credit bureaus. Be cautious of unsolicited communications that reference law-enforcement matters or claim to come from the Sheriff's Office, as such messages can be used for phishing.

Official notification, if required, would come from the agency itself; check any correspondence you receive carefully and verify its authenticity through known contact channels. As an additional practical measure, you can run a free exposure scan of your email address to check whether that address has already appeared in known breach data sets. That scan will not confirm or rule out involvement in this specific incident, but it can indicate whether your credentials or personal details have surfaced elsewhere and help you prioritise password changes and further monitoring.

AICompiled with AI assistance from public sources and published under our editorial standards.