Skip to content
← All breaches
Threat actor tracker 156 incidents tracked

Apt73 — every breach we're tracking

Running log of incidents attributed to or claimed by Apt73 in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked156
Latest activityJuly 24, 2026
TypeRansomware / extortion

Groups like Apt73 steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 156 incidents we've attributed to Apt73.

high July 24, 2026

metrabyte.cloud Listed by APT73 Ransomware Group

metrabyte.cloud is the website of Metrabyte Cloud Co., Ltd., a cloud service provider from Thaila...…

high July 06, 2026

dgcement.com Listed by APT73 Ransomware Group

dgcement.com — this is the website of D.G. Khan Cement Company Limited (DG Cement), a major cem...…

high July 06, 2026

azarestan.com Listed by APT73 Ransomware Group

azarestan.com (Azarestan Business Development Group) is a holding company based in Iran. Azaresta...…

high July 06, 2026

vicentetrapani.com Listed by APT73 Ransomware Group

vicentetrapani.com — this is the website of Vicente Trapani S.A., an agro-industrial holding co...…

high July 06, 2026

westernint.com Listed by APT73 Ransomware Group

Western International Group is a large private conglomerate based in Dubai that operates in the r...…

high July 03, 2026

aydeniz.com Listed by APT73 Ransomware Group

Aydeniz Group is a family-owned group of companies founded in 1975, operating in several key indu...…

high July 02, 2026

holidaypalace.com Listed by APT73 Ransomware Group

Holiday Palace Hotel in Spain. Guest information, internal documents, reports, photos, videos, an...…

high July 02, 2026

ritavo.com Listed by APT73 Ransomware Group

ritavo.com is the website of Rita Võ Group, a private multidisciplinary holding company from Vie...…

high July 02, 2026

flazio.com Listed by APT73 Ransomware Group

lazio.com — this is a company from Italy. Flazio is a website builder platform that allows use...…

high June 23, 2026

kliknklik.com Listed by APT73 Ransomware Group

KliknKlik.com — a company from Indonesia, an online retailer and distributor of computer equipm...…

high June 23, 2026

viennaairport.com Listed by APT73 Ransomware Group

Vienna Airport (Flughafen Wien AG) is an Austrian company, the operator of Vienna International A...…

high June 23, 2026

gov.br Listed by APT73 Ransomware Group

Gov.br — this is the official state digital platform and domain zone of the Brazilian Federal G...…

high June 03, 2026

smarty.arpinet.am Listed by APT73 Ransomware Group

***.am - it is an online platform for managing real estate data in the Armenian market, provi...…

high June 02, 2026

elections.mia.gov.am from WOLVES OF TURAN Listed by APT73 Ransomware Group

Hello, dear visitors of Bashe's blog. Today, we contacted the Turkish Wolves of Turan group and b...…

high May 22, 2026

tkgm.gov.tr Listed by APT73 Ransomware Group

TKGM (Tapu ve Kadastro Genel Müdürlüğü) is a government agency from Turkey, the General Dire...…

high May 22, 2026

minsa.com.mx Listed by APT73 Ransomware Group

Minsa is a company from Mexico, one of the largest producers of nixtamalizada (masa harina) corn ...…

high May 22, 2026

tvnmedia.com Listed by APT73 Ransomware Group

TVN Media is a multimedia company from Panama, engaged in broadcasting, radio, digital media and ...…

high May 21, 2026

grupopetersen.com.ar Listed by APT73 Ransomware Group

Grupo Petersen is a multidisciplinary financial and industrial group from Argentina, operating in...…

high May 21, 2026

narit.or.th Listed by APT73 Ransomware Group

The National Astronomical Research Institute of Thailand (Thailand's National Astronomical Resear...…

high May 21, 2026

alkaloid.com.mk Listed by APT73 Ransomware Group

Alkaloid is a pharmaceutical company from Northern Macedonia, founded in Skopje in 1936, producin...…

high April 27, 2026

trifecta.com Listed by APT73 Ransomware Group

Information: Trifecta is a trusted advisor for some of the most widely recognized and successful ...…

high April 27, 2026

credio.eu Listed by APT73 Ransomware Group

Czech company Credio. IT consulting, electronic document management. Credits to internal systems....…

high April 27, 2026

bigalsfoodservice.co.uk Listed by APT73 Ransomware Group

Our foodservice roots trace all the way back to a butchers shop in Dublin city centre in 1966. Ke...…

high April 27, 2026

pindrophearing.co.uk Listed by APT73 Ransomware Group

We’re specialists in the diagnosis and treatment of hearing conditions, but just as important i...…

high April 27, 2026

egov.sc Listed by APT73 Ransomware Group

eGov Seychelles is a government portal in Seychelles that provides online public services and ele...…

high April 27, 2026

whessoe.com.my Listed by APT73 Ransomware Group

Whessoe Engineering (Malaysia) Sdn Bhd is an engineering company in Malaysia that designs and bui...…

high April 27, 2026

alx-pc.com Listed by APT73 Ransomware Group

Alexandria Petroleum Company (APC) is a state—owned oil refining company in Egypt that processe...…

high April 27, 2026

bms.com Listed by APT73 Ransomware Group

Pharmaceutical company. personal data - 302 lines…

high April 27, 2026

sansirostadium.com Listed by APT73 Ransomware Group

UEFA personal contact data.…

high April 27, 2026

siapenet.gov.br Listed by APT73 Ransomware Group

Today, SIAPE processes the remuneration of civil servants, regulated both by the uniform federal ...…

high April 27, 2026

asunim.co Listed by APT73 Ransomware Group

Asunim is a company operating in the field of renewable energy, which is engaged in the developme...…

high April 27, 2026

phb.com Listed by APT73 Ransomware Group

PHB Inc. is an industrial company in the United States that manufactures equipment and metal stru...…

high April 27, 2026

olpro.com.my Listed by APT73 Ransomware Group

OLPRO Engineering Sdn Bhd is an engineering company in Malaysia that designs and manufactures ind...…

high April 27, 2026

algosaibi-gtb.com Listed by APT73 Ransomware Group

Abdulaziz & Saad Almoosaibi & GBT (Al‑Gosaibi GTB) is an industrial company in Saudi Arabia tha...…

high April 27, 2026

shj.ae Listed by APT73 Ransomware Group

Sharjah Electricity, Water, and Gas Authority (sec.shj.ae) is a government-owned utility in Sharj...…

high April 27, 2026

trinitesolutions.com Listed by APT73 Ransomware Group

Trinite Solutions was established in 2003. Its mission is to develop, market and implement busine...…

high April 27, 2026

hl.co.uk Listed by APT73 Ransomware Group

The hl.co.uk domain is owned by Hargreaves Lansdown (legal name "Hargreaves Lansdown Asset Manage...…

high April 27, 2026

cofaco.com Listed by APT73 Ransomware Group

Cofaco Industries S.A.C. is a textile company in Peru, which produces fabrics and tailoring (a fu...…

high April 27, 2026

mahidol.ac.th Listed by APT73 Ransomware Group

Mahidol University is a major public research university established in Thailand with deep histor...…

high April 27, 2026

lamaisonducitron.com Listed by APT73 Ransomware Group

Lemon product store.…

high April 27, 2026

baldinger-ag.ch Listed by APT73 Ransomware Group

Since 1970, Baldinger Fahrzeugbau has stood for continuous innovation and the highest quality. We...…

high April 27, 2026

ifmis.go.ke Listed by APT73 Ransomware Group

Integrated Financial Management Information System (IFMIS) is a government system in Kenya that i...…

high April 27, 2026

servicepower.com Listed by APT73 Ransomware Group

Large software development company Service Power. Great Britain. Documents of internal systems, c...…

high April 27, 2026

dpwh.gov.ph Listed by APT73 Ransomware Group

Department of Public Works and Highways is a government agency in the Philippines that is respons...…

high April 27, 2026

ires.ma Listed by APT73 Ransomware Group

Institut Royal des Études Stratégiques is a state—owned analytical center in Morocco, which i...…

high April 27, 2026

polleninformation.at Listed by APT73 Ransomware Group

Pollen situation informational site. Personal info + Pass. 22140 lines…

high April 27, 2026

sella.eng.br Listed by APT73 Ransomware Group

mentoring programs for managers. Internal and personal docs. 0.3 GB…

high April 27, 2026

providentgh.com Listed by APT73 Ransomware Group

Provident Insurance Limited Company is an insurance company in Ghana that provides insurance (aut...…

high April 27, 2026

medikaplaza.com Listed by APT73 Ransomware Group

Medika Plaza is a healthcare company in Indonesia that provides medical services, corporate medic...…

high April 27, 2026

jgpetrucci.com Listed by APT73 Ransomware Group

J.G. Petrucci Company, Inc. is a real estate development and construction company in the United S...…

high April 27, 2026

grupo-principal.com Listed by APT73 Ransomware Group

Grupo Principal is a distribution company in Mexico that supplies and sells consumer goods (FMCG)...…

high April 27, 2026

dunav.com Listed by APT73 Ransomware Group

Dunav Insurance Company is an insurance company in Serbia that provides insurance for life, prope...…

high April 27, 2026

arrawdah.org.sa Listed by APT73 Ransomware Group

Al Rawdah Cooperative Society is a cooperative organization in Saudi Arabia that provides social ...…

high April 27, 2026

centrum.sk Listed by APT73 Ransomware Group

Centrum.sk (centrum.sk ) is an online portal in Slovakia that provides an email service, news and...…

high April 27, 2026

2m.ma Listed by APT73 Ransomware Group

2M TV (2m.ma ) is a national television channel in Morocco, which is engaged in television broadc...…

high April 27, 2026

iam.ma Listed by APT73 Ransomware Group

Maroc Telecom is a telecommunications company in Morocco that provides mobile communications, Int...…

high April 27, 2026

doghairinc.com Listed by APT73 Ransomware Group

Dog Hair INCluded is a small company (online brand) that sells pet accessories and products with ...…

high April 27, 2026

isosl.be Listed by APT73 Ransomware Group

ISOSL is an engineering company in Belgium, which deals with industrial solutions, automation and...…

high April 27, 2026

vanheyghenstaal.be Listed by APT73 Ransomware Group

Van Heyghen Staal is a metallurgical company in Belgium, which is engaged in the processing and r...…

high April 27, 2026

moccae.gov.ae Listed by APT73 Ransomware Group

The Ministry of Climate Change and Environment (moccae.gov.ae) is a government ministry in the Un...…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.