Inside Broadway Listed by medusa Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On June 4, 2024, the children's theater organization Inside Broadway was listed by the medusa ransomware group as a victim of a data breach. Public details indicate that internal files totaling 1.3 GB were exfiltrated in a ransomware attack, though the number of people affected remains unknown and further specifics about the intrusion have not been disclosed.

The listing places a small New York City nonprofit that works with young performers and arts education under scrutiny for potential exposure of organizational records. Because the claim originates from a ransomware group's leak site and has not been independently confirmed in the available record, the full scope and impact stay limited to what has been reported so far.

Inside the incident

According to the reported summary, Inside Broadway appeared on medusa's listings on June 4, 2024. The group claims responsibility for a ransomware attack in which internal files were taken from the organization. The volume of data cited is 1.3 GB. No public information has been released about the precise date the intrusion began, how the attackers gained access, whether systems were encrypted, or whether a ransom demand was issued or paid. The number of individuals whose information may have been involved is listed as unknown. These gaps mean the incident is known primarily through the leak-site claim and the stated data volume rather than through detailed forensic disclosures.

Who is medusa?

Medusa is a ransomware operation that has been active in recent years and is documented for using double-extortion tactics. The group typically encrypts a victim's systems and simultaneously steals data, then threatens to publish the material on a dedicated leak site if payment is not received. Medusa has listed a range of organizations across sectors, often posting sample files or full archives to pressure victims. Its listings are claims made by the group itself; they do not automatically constitute independent verification that every detail of an attack occurred exactly as described. In this case, the appearance of Inside Broadway on the site is therefore treated as an unverified assertion by the actors rather than confirmed fact from the victim or investigators.

Who is Inside Broadway?

Inside Broadway is a children's theater organization founded in 1982 by Michael Presser. Its corporate office is located at 630 9th Ave, Suite 802, New York City, New York 10036, and the organization employs 17 people. As a nonprofit focused on theater education and performances for young audiences, it operates in the arts and youth-services sector. Organizations of this type commonly maintain records related to program participants, staff, donors, volunteers, and operational finances. A breach involving such an entity is consequential because it can affect minors and families who interact with the programs, as well as the small staff that keeps the organization running. With only 17 employees, the group has limited internal resources compared with larger institutions, which can complicate recovery and communication after an incident.

What data was at risk

The available facts state that internal files were exfiltrated in the ransomware attack and that the total volume of data leakage is 1.3 GB. No further breakdown of file types, categories, or specific records has been disclosed. For a children's theater organization, internal files could in principle include administrative documents, contact lists, program materials, financial records, or personnel information, but the exact contents remain unconfirmed. Because the number of people affected is unknown and no detailed inventory has been published, it is not possible to state with certainty which individuals or data categories were involved. Readers should treat any assumption about specific personal information as speculative until additional verified details emerge.

What's at stake

For people connected to Inside Broadway—staff, volunteers, families of young participants, or donors—the primary risk is that personal or contact information contained in the internal files could be misused if the data is published or circulated. Even a modest 1.3 GB archive can hold sensitive administrative material that enables phishing, identity-related fraud, or unwanted contact. For the organization itself, the incident raises operational and reputational concerns: restoring systems, notifying affected parties where required, and maintaining trust with the community it serves. Because the group is small, the administrative burden of response can be significant. At present these risks remain potential rather than fully documented, given that the precise contents of the files and the number of individuals involved have not been confirmed publicly.

What to do if you're exposed

If you have a connection to Inside Broadway—whether as staff, a volunteer, a parent of a participant, or a donor—monitor accounts and communications for unusual activity. Change passwords on any accounts that may have been linked to the organization, enable multi-factor authentication where available, and be cautious of unsolicited messages that reference the theater or request personal details. Review financial and credit statements for unexpected activity and consider placing a fraud alert if you believe sensitive identifiers were involved. Because the exact data types remain undisclosed, treat any notification from the organization as the primary source of guidance. Readers can also run a free exposure scan of their email address to check whether their information has already appeared in known breach data sets, which can help determine whether further monitoring is warranted.

AICompiled with AI assistance from public sources and published under our editorial standards.