Tarrant Appraisal District Listed by medusa Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Tarrant Appraisal District, a Texas political subdivision that appraises property for tax purposes in Tarrant County, has been listed by the Medusa ransomware group as a victim of a data-exfiltration attack. The listing was reported on March 21, 2024. Public detail remains limited: the number of people affected is unknown, and the only confirmed description of the material is that internal files were taken in a ransomware attack totaling 217.79 GB.

Because appraisal districts routinely handle property-ownership records and related administrative data, any confirmed compromise of their systems raises practical questions for residents and property owners about what may have left the organisation’s control. At this stage the claim rests on the group’s leak-site listing rather than independent verification of every detail.

Inside the incident

According to the reported information, Medusa listed Tarrant Appraisal District after claiming to have exfiltrated internal files during a ransomware attack. The volume of data cited is 217.79 GB. No public timeline of the intrusion, no description of the initial access method, and no confirmed count of affected individuals have been released. The organisation itself is described as a political subdivision of the State of Texas created effective 1 January 1980, governed by the Texas Property Tax Code, with its corporate office at 2500 Handley Ederville Road, Fort Worth, Texas, and a staff of 237 employees. Beyond the leak-site claim and the stated data volume, further operational specifics remain undisclosed.

Who is medusa?

Medusa is a ransomware operation that has been publicly documented since at least 2021. Like many contemporary groups, it typically employs a double-extortion model: encrypting systems while also copying data and threatening to publish it on a dedicated leak site if a ransom is not paid. The group has previously listed a range of victims across government, education, healthcare and private-sector organisations. Listings on its site constitute claims by the actors themselves; they are not independent confirmations of every asserted detail. In this case, the only specific assertion tied to Tarrant Appraisal District is the listing itself and the reported 217.79 GB of internal files.

Tarrant Appraisal District and its sector

Tarrant Appraisal District is the local appraisal authority for Tarrant County, Texas. Under the Texas Property Tax Code it is responsible for valuing real and personal property so that local taxing units can levy ad-valorem taxes. Such districts maintain extensive records of property ownership, valuations, exemptions, and related correspondence. They interact with homeowners, commercial property owners, tax agents and other government entities. Because the data they hold is both personally identifiable and financially relevant, a breach of an appraisal district’s systems can affect a wide cross-section of the local population and can complicate tax administration if systems or records are disrupted.

What was likely exposed

The facts state only that internal files were exfiltrated in a ransomware attack and that the total volume is 217.79 GB. No inventory of file types, no list of data categories, and no confirmation of whether personal identifiers, financial records or other sensitive material were included have been made public. Organisations of this kind typically hold property-owner names and addresses, parcel identifiers, valuation histories, exemption applications, and internal administrative documents. Whether any of those categories were among the 217.79 GB remains unconfirmed.

• Claimed data volume: 217.79 GB of internal files
• Named exposure: internal files taken during a ransomware attack
• People affected: unknown / not disclosed
• Exact file contents and data categories: unconfirmed

Why it matters

For individuals whose information may have been among the files, the practical risks include potential misuse of personal or property-related details for social-engineering attempts, identity-related fraud, or unwanted contact. For the district itself, the incident raises operational and reputational questions: restoration of systems, possible regulatory notifications, and the need to reassure the public that core appraisal functions remain reliable. Because the number of affected people is unknown and the precise contents of the files are undisclosed, the full scope of impact cannot yet be quantified. The listing by Medusa, however, places the organisation among a growing number of public-sector entities that have faced ransomware claims involving data theft.

What to do if you're exposed

If you own property in Tarrant County or have otherwise interacted with the appraisal district, treat the possibility of exposure seriously but without panic. Monitor financial and credit accounts for unexpected activity, be cautious of unsolicited communications that reference property or tax matters, and consider placing a fraud alert or credit freeze if you believe your personal details may have been involved. Keep records of any suspicious contact. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. Official updates from Tarrant Appraisal District or relevant Texas authorities should be the primary source for any confirmed notifications or recommended next steps.

AICompiled with AI assistance from public sources and published under our editorial standards.