The medusalocker ransomware group listed Dep on its data leak site on 2026-11-11. Claim as published on the leak site: THERMO GROUP, C.A. wholesales pharmaceutical products and medical supplies, as evidenced by its financial transactions with FarmaTodo, C.A., including sales commission reports and income tax withholdings (ISLR).