Natures Organics
bd_f8bb55c5cd0ad32c · schema v1 · pii pii-v1
Full breach record for Natures Organics →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.
Exclusive: Natures Organics confirms Medusa ransomware attack - Cyber Daily. Natures Organics: The Australian company Natures Organics has confirmed it was the victim of a cyberattack by the Medusa ransomware group, which stole employees' personal data, including passport and driver's license scans. The hackers threaten to publish the data if a ransom of $150,000 is not paid within 8 days. Natures Organics has notified the relevant parties and taken measures to respond to the incident. Linked ransomware group: medusa.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Jan 30, 2025
Press report
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (2)
- Leak Sitemedusabd_77f35783fb29b13a2025-02-11 · +12dCandidate
- Leak Sitemedusabd_5886f5bc3eb580542025-01-30Candidate
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
medusa
According to ransomware.live, Medusa is a ransomware-as-a-service operation active since June 2021 that has targeted over 300 victims across critical infrastructure sectors including healthcare, education, legal, and manufacturing using double-extortion, with attacks surging 42% between 2023 and 2024 and a formal CISA advisory issued in early 2025.