Natures Organics

Summary

The Medusa ransomware gang claimed to have stolen 142.85 gigabytes of data from Natures Organics, an Australian organic goods producer. The attackers published file listings containing more than 47,000 entries and claimed the stolen data included passport scans, driver licence scans, and other personal information.

What Happened

On 11 February 2025, Natures Organics was targeted by the Medusa ransomware gang in a cyber attack. The threat actors claimed to have exfiltrated 142.85 gigabytes of data and published extensive file listings on their darknet leak site. The Medusa group employs ransomware-as-a-service tactics and uses living-off-the-land techniques, leveraging legitimate software tools for malicious purposes.

Impact on Individuals

The attackers claimed the stolen data includes passport scans, driver licence scans, and other personal information belonging to individuals associated with Natures Organics. The full extent of affected individuals has not been publicly disclosed.

Organisational Response

Natures Organics, which produces popular sustainable goods brands including Earth Choice, My Soda, Purity, and Funtime, confirmed the cyber incident. The company's retail partners include major Australian retailers such as Coles and Chemist Warehouse.