US officials say Medusa ransomware hit 500 victims by April.

Many victims sit in critical infrastructure sectors, cyber and law-enforcement agencies warned.

Ransomware-as-a-service splits the tool builders from the affiliates who break in, so arrests remove labor but not the tooling.

The federal count reflects only US reports, so the true global victim total stays unknown.

Sources: The Record