On July 15, 2024, the Royal Brighton Yacht Club appeared on the Medusa ransomware group’s leak site, claiming that the club suffered a ransomware attack in which attackers exfiltrated 94.2 GB of internal files. The Melbourne-area yacht club, which serves members with sailing events, social functions, and administrative operations, has not publicly quantified how many individuals’ records were included in the stolen data.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Royal Brighton Yacht Club
Get alerted the next time Royal Brighton Yacht Club files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Royal Brighton Yacht Club’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Details from the Medusa Listing
The Medusa leak site states that Royal Brighton Yacht Club was compromised in a ransomware incident and that attackers successfully exfiltrated 94.2 GB of internal files. The listing does not specify the exact types of documents taken, nor does it disclose the number of affected individuals. It simply presents samples of the stolen material as proof of compromise and follows the group’s standard practice of threatening full publication unless a ransom is paid. The disclosure indicates the club’s corporate office at PO Box 74, Brighton, Victoria, was the entity listed.
Why This Matters for You and Your Family
When a membership-based organisation like a yacht club is breached, the data exposed often includes names, addresses, phone numbers, email addresses, dates of birth, and financial details tied to memberships, event registrations, or marina bookings. Even though the exact contents remain undisclosed, any such information can be used to impersonate you, attempt account takeovers, or launch targeted phishing campaigns. If you or any member of your family belongs to the Royal Brighton Yacht Club or has attended its events, your personal details may now sit in an attacker-controlled archive. Children’s records, if included through junior sailing programs or family memberships, face the same risks.
The Doxxing and Identity-Chain Risk
Stolen internal files frequently contain spreadsheets that link names to addresses, phone numbers, emergency contacts, and sometimes passport or driver’s licence copies. Attackers can combine this data with information from other breaches to build detailed identity profiles. A single leaked email or phone number can unlock linked social-media accounts, gaming profiles, or online shopping histories. This chaining effect turns one breach into a gateway for doxxing, identity theft, or even physical stalking. Public reporting on similar incidents shows that yacht clubs, sailing associations, and other leisure organisations regularly store exactly the kind of personal data that fuels these long-term identity attacks.