Aranui Cruises

In August 2023, Aranui Cruises, a long-standing cruise operator based in French Polynesia, fell victim to a targeted cyberattack by the Medusa Locker ransomware group. The incident was disclosed on August 31, 2023, with the threat actors demanding a $100,000 ransom. The attack resulted in a data breach, though the exact scope and volume of the leaked information remain undisclosed. The compromised data was later published on the Medusa Locker’s Dark Web Tor blog, as reported by cybersecurity firm RedPacket Security.The breach poses significant risks to Aranui Cruises, including potential financial losses (both from the ransom demand and operational disruptions), reputational damage (due to public exposure of the incident), and legal/regulatory consequences (if customer or employee data was exposed). The company’s American office in San Mateo, California, may also face scrutiny under data protection laws. While the full impact is still unfolding, the involvement of ransomware and confirmed data leakage elevates the severity of the incident, particularly if sensitive customer or internal records were compromised.

Source: https://www.breachsense.com/breaches/aranui-data-breach/

TPRM report: https://www.rankiteo.com/company/aranui-cruises

"id": "ara542092125",
"linkid": "aranui-cruises",
"type": "Ransomware",
"date": "8/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'travel/cruise operator',
                        'location': [{'office': {'city': 'San Mateo',
                                                 'country': 'USA',
                                                 'state': 'California'},
                                      'region': 'French Polynesia'}],
                        'name': 'Aranui Cruises',
                        'type': 'private company'}],
 'data_breach': {'data_exfiltration': True},
 'date_publicly_disclosed': '2023-08-31',
 'description': 'In August 2023, Aranui Cruises, the oldest cruise operator in '
                'French Polynesia, was targeted by the Medusa Locker '
                'ransomware group. The attack resulted in a data leak, with a '
                'ransom demand of $100,000. The breach was reported on August '
                '31, 2023, via the Medusa Locker Onion Dark Web Tor Blog page.',
 'impact': {'data_compromised': True},
 'motivation': 'financial (ransom)',
 'ransomware': {'data_exfiltration': True,
                'ransom_demanded': '$100,000',
                'ransomware_strain': 'Medusa Locker'},
 'references': [{'source': 'Medusa Locker Onion Dark Web Tor Blog'},
                {'source': 'RedPacket Security'}],
 'threat_actor': 'Medusa Locker',
 'title': 'Aranui Cruises Ransomware Attack by Medusa Locker',
 'type': 'ransomware'}