Press

The Appalachian Regional Commission (ARC) suffered a data security incident involving malware deployment on certain systems, resulting in unauthorized access to personal information. The incident occurred on April 10, 2025, and was discovered on the same date. It was claimed under the Medusa brand on April 27th.