Ransomware Group: ELDORADO

VICTIM NAME: compra-aruba[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the ELDORADO Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak involving compra-aruba.com, an online platform dedicated to providing shopping and shipping services for residents in Aruba, was discovered on October 14, 2024. The breach is attributed to the malicious group known as ElDorado. The platform offers a unique service that enables Arubans to purchase from U.S. online stores using a U.S. shipping address, facilitating order consolidation and efficient shipping to Aruba. The services aim to simplify international shopping, making it more accessible and convenient for the local population.

While the leak page does not provide specific user data or internal employee details, it emphasizes the services and features offered by compra-aruba.com. The website aims to enhance the shopping experience by providing users a seamless process for obtaining goods from U.S. retailers. No sensitive user information or employee data was noted in the leak, indicating that the compromise primarily affects the platform’s operational integrity rather than exposing PII from users or employees. The contents of the leak could potentially impact the reputation of the service, making awareness and precautionary measures crucial for both the company and its customers.