Personal data have been leaked after a malicious attack on the Open University of Cyprus (OUC), with the "MEDUSA" ransomware group now demanding ransom to delete the data, otherwise it will publish it online.