In August 2023, Aranui Cruises, a long-standing cruise operator based in French Polynesia, fell victim to a targeted cyberattack by the Medusa Locker ransomware group. The incident was disclosed on August 31, 2023, with the threat actors demanding a $100,000 ransom. The attack resulted in a data breach, though the exact scope and volume of the leaked information remain undisclosed. The compromised data was later published on the Medusa Locker’s Dark Web Tor blog, as reported by cybersecurity firm RedPacket Security.The breach poses significant risks to Aranui Cruises, including potential financial losses (both from the ransom demand and operational disruptions), reputational damage (due to public exposure of the incident), and legal/regulatory consequences (if customer or employee data was exposed). The company’s American office in San Mateo, California, may also face scrutiny under data protection laws. While the full impact is still unfolding, the involvement of ransomware and confirmed data leakage elevates the severity of the incident, particularly if sensitive customer or internal records were compromised.