← All breaches
Threat actor tracker 158 incidents tracked

Apt73 — every breach we're tracking

Running log of incidents attributed to or claimed by Apt73 in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked158
Latest activityJuly 24, 2026
TypeRansomware / extortion

Groups like Apt73 steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 158 incidents we've attributed to Apt73.

high July 24, 2026

metrabyte.cloud Listed by apt73 Ransomware Group

metrabyte.cloud is the website of Metrabyte Cloud Co., Ltd., a cloud service provider from Thaila...…

high July 06, 2026

dgcement.com Listed by apt73 Ransomware Group

dgcement.com — this is the website of D.G. Khan Cement Company Limited (DG Cement), a major cem...…

high July 06, 2026

vicentetrapani.com Listed by apt73 Ransomware Group

vicentetrapani.com — this is the website of Vicente Trapani S.A., an agro-industrial holding co...…

high July 06, 2026

westernint.com Listed by apt73 Ransomware Group

Western International Group is a large private conglomerate based in Dubai that operates in the r...…

high July 06, 2026

azarestan.com Listed by apt73 Ransomware Group

azarestan.com (Azarestan Business Development Group) is a holding company based in Iran. Azaresta...…

high July 03, 2026

aydeniz.com Listed by apt73 Ransomware Group

Aydeniz Group is a family-owned group of companies founded in 1975, operating in several key indu...…

high July 02, 2026

flazio.com Listed by apt73 Ransomware Group

lazio.com — this is a company from Italy. Flazio is a website builder platform that allows use...…

high July 02, 2026

holidaypalace.com Listed by apt73 Ransomware Group

Holiday Palace Hotel in Spain. Guest information, internal documents, reports, photos, videos, an...…

high July 02, 2026

ritavo.com Listed by apt73 Ransomware Group

ritavo.com is the website of Rita Võ Group, a private multidisciplinary holding company from Vie...…

high June 23, 2026

gov.br Listed by apt73 Ransomware Group

Gov.br — this is the official state digital platform and domain zone of the Brazilian Federal G...…

high June 23, 2026

kliknklik.com Listed by apt73 Ransomware Group

KliknKlik.com — a company from Indonesia, an online retailer and distributor of computer equipm...…

high June 23, 2026

viennaairport.com Listed by apt73 Ransomware Group

Vienna Airport (Flughafen Wien AG) is an Austrian company, the operator of Vienna International A...…

high June 03, 2026

smarty.arpinet.am Listed by apt73 Ransomware Group

***.am - it is an online platform for managing real estate data in the Armenian market, provi...…

high June 02, 2026

elections.mia.gov.am from WOLVES OF TURAN Listed by apt73 Ransomware Group

Hello, dear visitors of Bashe's blog. Today, we contacted the Turkish Wolves of Turan group and b...…

high May 22, 2026

tvnmedia.com Listed by apt73 Ransomware Group

TVN Media is a multimedia company from Panama, engaged in broadcasting, radio, digital media and ...…

high May 22, 2026

minsa.com.mx Listed by apt73 Ransomware Group

Minsa is a company from Mexico, one of the largest producers of nixtamalizada (masa harina) corn ...…

high May 22, 2026

tkgm.gov.tr Listed by apt73 Ransomware Group

TKGM (Tapu ve Kadastro Genel Müdürlüğü) is a government agency from Turkey, the General Dire...…

high May 21, 2026

alkaloid.com.mk Listed by apt73 Ransomware Group

Alkaloid is a pharmaceutical company from Northern Macedonia, founded in Skopje in 1936, producin...…

high May 21, 2026

grupopetersen.com.ar Listed by apt73 Ransomware Group

Grupo Petersen is a multidisciplinary financial and industrial group from Argentina, operating in...…

high May 21, 2026

narit.or.th Listed by apt73 Ransomware Group

The National Astronomical Research Institute of Thailand (Thailand's National Astronomical Resear...…

high April 27, 2026

bms.com Listed by apt73 Ransomware Group

Pharmaceutical company. personal data - 302 lines…

high April 27, 2026

sansirostadium.com Listed by apt73 Ransomware Group

UEFA personal contact data.…

high April 27, 2026

sella.eng.br Listed by apt73 Ransomware Group

mentoring programs for managers. Internal and personal docs. 0.3 GB…

high April 27, 2026

polleninformation.at Listed by apt73 Ransomware Group

Pollen situation informational site. Personal info + Pass. 22140 lines…

high April 27, 2026

siapenet.gov.br Listed by apt73 Ransomware Group

Today, SIAPE processes the remuneration of civil servants, regulated both by the uniform federal ...…

high April 27, 2026

certifiedinfosec.com Listed by apt73 Ransomware Group

Certified Information Security is a registered trade name for Certified Tech Trainers (CTT) (D-U-...…

high April 27, 2026

minerasancristobal.com Listed by apt73 Ransomware Group

Minerals & Mining. financial docs, internal docs, personal docs.…

high April 27, 2026

ires.ma Listed by apt73 Ransomware Group

Institut Royal des Études Stratégiques is a state—owned analytical center in Morocco, which i...…

high April 27, 2026

2m.ma Listed by apt73 Ransomware Group

2M TV (2m.ma ) is a national television channel in Morocco, which is engaged in television broadc...…

high April 27, 2026

centrum.sk Listed by apt73 Ransomware Group

Centrum.sk (centrum.sk ) is an online portal in Slovakia that provides an email service, news and...…

high April 27, 2026

asunim.co Listed by apt73 Ransomware Group

Asunim is a company operating in the field of renewable energy, which is engaged in the developme...…

high April 27, 2026

phb.com Listed by apt73 Ransomware Group

PHB Inc. is an industrial company in the United States that manufactures equipment and metal stru...…

high April 27, 2026

olpro.com.my Listed by apt73 Ransomware Group

OLPRO Engineering Sdn Bhd is an engineering company in Malaysia that designs and manufactures ind...…

high April 27, 2026

algosaibi-gtb.com Listed by apt73 Ransomware Group

Abdulaziz & Saad Almoosaibi & GBT (Al‑Gosaibi GTB) is an industrial company in Saudi Arabia tha...…

high April 27, 2026

alx-pc.com Listed by apt73 Ransomware Group

Alexandria Petroleum Company (APC) is a state—owned oil refining company in Egypt that processe...…

high April 27, 2026

arrawdah.org.sa Listed by apt73 Ransomware Group

Al Rawdah Cooperative Society is a cooperative organization in Saudi Arabia that provides social ...…

high April 27, 2026

vanheyghenstaal.be Listed by apt73 Ransomware Group

Van Heyghen Staal is a metallurgical company in Belgium, which is engaged in the processing and r...…

high April 27, 2026

isosl.be Listed by apt73 Ransomware Group

ISOSL is an engineering company in Belgium, which deals with industrial solutions, automation and...…

high April 27, 2026

doghairinc.com Listed by apt73 Ransomware Group

Dog Hair INCluded is a small company (online brand) that sells pet accessories and products with ...…

high April 27, 2026

dpwh.gov.ph Listed by apt73 Ransomware Group

Department of Public Works and Highways is a government agency in the Philippines that is respons...…

high April 27, 2026

iam.ma Listed by apt73 Ransomware Group

Maroc Telecom is a telecommunications company in Morocco that provides mobile communications, Int...…

high April 27, 2026

servicepower.com Listed by apt73 Ransomware Group

Large software development company Service Power. Great Britain. Documents of internal systems, c...…

high April 27, 2026

prixet.com Listed by apt73 Ransomware Group

We are a technology company based in Europe and the Caribbean. We are dedicated to data creation ...…

high April 27, 2026

compensatii.gov.md Listed by apt73 Ransomware Group

compensatii.gov.md is the official online government platform of the Republic of Moldova, created...…

high April 27, 2026

corahperu.org Listed by apt73 Ransomware Group

corahperu.org is the official website of Proyecto Especial CORAH, a Peruvian government project a...…

high April 27, 2026

gedco.ps Listed by apt73 Ransomware Group

gedco.ps is the website of the Gaza Electricity Distribution Company (GEDCO), the electricity dis...…

high April 27, 2026

shj.ae Listed by apt73 Ransomware Group

Sharjah Electricity, Water, and Gas Authority (sec.shj.ae) is a government-owned utility in Sharj...…

high April 27, 2026

ifmis.go.ke Listed by apt73 Ransomware Group

Integrated Financial Management Information System (IFMIS) is a government system in Kenya that i...…

high April 27, 2026

jgpetrucci.com Listed by apt73 Ransomware Group

J.G. Petrucci Company, Inc. is a real estate development and construction company in the United S...…

high April 27, 2026

trinitesolutions.com Listed by apt73 Ransomware Group

Trinite Solutions was established in 2003. Its mission is to develop, market and implement busine...…

high April 27, 2026

baldinger-ag.ch Listed by apt73 Ransomware Group

Since 1970, Baldinger Fahrzeugbau has stood for continuous innovation and the highest quality. We...…

high April 27, 2026

lamaisonducitron.com Listed by apt73 Ransomware Group

Lemon product store.…

high April 27, 2026

protectasecurity.pe Listed by apt73 Ransomware Group

Protecta Security provides insurance, microfinance and financial services. Internal docs, financi...…

high April 27, 2026

netromsoftware.ro Listed by apt73 Ransomware Group

Romanian software development company. Export CRM…

high April 27, 2026

credio.eu Listed by apt73 Ransomware Group

Czech company Credio. IT consulting, electronic document management. Credits to internal systems....…

high April 27, 2026

bigalsfoodservice.co.uk Listed by apt73 Ransomware Group

Our foodservice roots trace all the way back to a butchers shop in Dublin city centre in 1966. Ke...…

high April 27, 2026

talonsolutions.co.uk Listed by apt73 Ransomware Group

Talon Solutions Ltd was formed by Vince Cluderay in 2002 for the purpose of selling document mana...…

high April 27, 2026

scopeset.de Listed by apt73 Ransomware Group

We offer support services for all our developed solutions and tools with an emphasize on direct a...…

high April 27, 2026

hl.co.uk Listed by apt73 Ransomware Group

The hl.co.uk domain is owned by Hargreaves Lansdown (legal name "Hargreaves Lansdown Asset Manage...…

high April 27, 2026

mahidol.ac.th Listed by apt73 Ransomware Group

Mahidol University is a major public research university established in Thailand with deep histor...…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.