In March 2024, the Medusa ransomware group launched a targeted attack on ADSP Mar Tirreno Settentrionale, the port authority overseeing the Northern Tyrrhenian Sea in Italy. The cybercriminals successfully infiltrated the organization’s systems, exfiltrating and subsequently leaking sensitive internal documents and financial records. Medusa, known for deploying malicious email attachments and torrent-based infiltration techniques, continued its broader campaign against public sector entities. The attack disrupted operational integrity, exposed confidential administrative and financial data, and placed the authority under coercive pressure by demanding a substantial ransom in exchange for the stolen information. The breach not only compromised the port authority’s internal workflows but also raised concerns over the security of critical maritime infrastructure, potentially affecting trade, logistics, and regulatory compliance in the region. The incident underscores the growing threat of ransomware groups targeting government-linked organizations to exploit vulnerabilities for financial gain and data leverage.