Tunad listed by Arcusmedia on leak site following claimed data breach

• Ransomware group: Arcusmedia
• Country: Norway
• Sector: Technology
• Announcement date: September 17, 2025

The threat group known as Arcusmedia has listed the technology company Tunad on its leak site, claiming that a data breach has occurred. This announcement, which appeared on the group's platform, marks a significant development in the ongoing threat landscape facing specialized technology firms.

Details of the claimed attack

According to the announcement published by the Arcusmedia group, the incident involving Tunad was reported on September 16, 2025. The group claims to have successfully compromised the company's data. Following the initial announcement, the group has initiated a countdown timer on their leak site, a tactic often used by ransomware actors to exert pressure on their targets.

This announcement is viewed as a direct threat against the infrastructure of the company. In modern cyberattacks, such listings are a common component of double extortion tactics. In these scenarios, threat actors do not merely encrypt a victim's systems to disrupt operations; they also steal sensitive information to use as leverage. By threatening to release stolen data on a public leak site, attackers aim to maximize their bargaining power during ransom negotiations.

Information regarding the alleged leaked data

Regarding the specifics of the breach, the listing provides no details regarding the nature of the alleged leaked data. No information has been provided concerning the volume of the data or the specific types of files that may have been compromised during the incident.

• No specific data types were named in the listing.

About Tunad

Tunad is a media intelligence platform that focuses on enhancing the results of advertising campaigns. The company provides specialized services within the fields of data analytics and advertising technology, serving a sector that relies heavily on the integrity and security of digital information.

Potential implications and industry context

This incident may pose a risk of exposure for corporate data and customer information held by Tunad. Because the company is based in Norway, a potential data breach of this nature could lead to legal proceedings under the European Union's General Data Protection Regulation (GDPR). Such regulatory frameworks impose strict requirements on how organizations must protect personal data and how they must report breaches to authorities and affected individuals.

Beyond the legal ramifications, such leaks may damage the company's commercial reputation. Furthermore, the exposure of corporate or customer information can create a foundation for targeted phishing attacks against customers, as attackers may use the stolen details to craft highly convincing fraudulent communications.

Information regarding the Arcusmedia group remains limited at this time. The group's specific methods and motivations are not yet fully understood. In the broader context of cybersecurity, organizations in the technology and media intelligence sectors often implement defensive measures such as multi-factor authentication, robust encryption for data at rest and in transit, and continuous monitoring of network traffic to mitigate these types of risks. As the situation evolves, the impact of this specific claim remains to be seen.