narit.or.th Listed by APT73 Ransomware Group

On May 21, 2026, the National Astronomical Research Institute of Thailand appeared on the leak site of the ransomware group apt73. The attackers published proof that they had exfiltrated internal files from narit.or.th during a ransomware incident. While the exact number of people whose personal information may have been exposed remains unknown, anyone whose records were held by the institute — employees, researchers, contractors, students, or partners — may now be at risk.

What Public Reporting Shows

Public reporting indicates that apt73 gained access to the institute’s systems, encrypted data, and then exfiltrated files before demanding payment. The group listed narit.or.th on its dark-web leak page on May 21, 2026, posting samples of the stolen material. The data includes internal documents that likely contain names, contact details, identification numbers, and other sensitive personal records. No precise victim count has been released, and the institute has not yet issued a detailed public statement on the scale of the breach.

Why This Matters for You and Your Family

When a government-backed research institute is hit, ordinary people get caught in the crossfire. Your tax records, research grant applications, travel documents, or children’s educational data may have been stored on those systems. Once files leave the organization’s control, they can be sold, traded, or used to launch targeted attacks against you. Internal files exfiltrated in ransomware incidents frequently contain spreadsheets of personal information that criminals later combine with other leaks to build detailed profiles.

A single breach like this can expose email addresses, phone numbers, and government ID details that stay valuable for years. For families, the risk extends beyond the primary account holder. Spouses, children, and even elderly relatives listed as emergency contacts can become targets.