O'Shea Builders
bd_e9fb850b33b303e9 · schema v1 · pii pii-v1
Full breach record for O'Shea Builders →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Medusa on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
O'Shea Builders (founded in 1902) is a commercial construction-services provider in Illinois with offices in Springfield and Peoria. O'Shea Builders provide general contracting, construction management, design build, civil and building maintenance services. O'Shea Builders corporate office is located in 3401 Constitution Dr, Springfield, Illinois, 62711, United States and has 137 employees. The total amount of data leakage is 120.50 GB
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4225ddd35277fc9aIndiana State AGfiled 2025-08-01(125d gap)Verified
Source provenance
- Source URL
- https://www.ransomware.live/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 28, 2025
- Raw hash
- 0f2465f9c1599a1959e6ca9a4985f816a4420d70e3fa741ddbfad523c44c2017
Reporting entity
- Name
- medusa
Victim entity
- Name
- O'Shea Buildersnorm: o shea builders
- Domain
- osheabuilders.com
- Industry
- Constructionllm
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Discovered
- Mar 29, 2025
- Attack vector
- Ransomware· medusa
- Threat actor
- MedusaExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.