Ransomware Group intelligence

Apt73

Active

Track Apt73 with 162 published victims and 12 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 162 Known published victims in this dataset
First discovered 2024-04-22 Earliest victim discovery date
Last discovered 2026-07-24 Latest victim discovery date
Inactive since 85 days Days since the latest known victim
Top country United States 22 victims
Known locations 12 Leak or negotiation infrastructure tracked

Overview

Apt73 is tracked by Breach House as a ransomware group with 162 published victims.

United States is currently the most targeted country in this dataset.

12 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 44 27.2%
  • Pending 118 72.8%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (12)

    Label Type Availability Links
    Leak location 8 Onion service Up checked 1h ago basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion
    Leak location 9 Onion service Up checked 1h ago basherykagbxoaiaxkgqhmhd5gbmedwb3di4ig3ouovziagosv4n77qd.onion
    Leak location 10 Onion service Up checked 1h ago bashete63b3gcijfofpw6fmn3rwnmyi5aclp55n6awcfbexivexbhyad.onion
    Leak location 6 Onion service Up checked 1h ago basheqtvzqwz4vp6ks5lm2ocq7i6tozqgf6vjcasj4ezmsy4bkpshhyd.onion
    Leak location 5 Onion service Up checked 1h ago bashe4aec32kr6zbifwd5x6xgjsmhg4tbowrbx4pneqhc5mqooyifpid.onion
    Leak location 11 Onion service Down checked 1h ago bashex7mokreyoxl6wlswxl4foi7okgs7or7aergnuiockuoq35yt3ad.onion
    Leak location 12 Onion service Down checked 1h ago qcgv5tfer4f46ns6ohh72zeyyh5uavoiybypzpt3lmwk5ecyqykptgqd.onion
    Leak location 7 Onion service Down checked 1h ago basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion
    Leak location 4 Onion service Down checked 1h ago apt73grpjgjwykrenq7vnjejue76vosdzptdvmonv7vyqnsyokrw57ad.onion
    Leak location 3 Onion service Down checked 1h ago fleqwmg7xnanypt5km2m75l72q7nlcvlp2m4sdmgjxorsn6tb3zyp3qd.onion
    Leak location 2 Onion service Down checked 1h ago wn6vonooq6fggjdgyocp7bioykmfjket7sbp47cwhgubvowwd7ws5pyd.onion
    Leak location 1 Web location Down checked 1h ago eraleignews.com

    Top Activity Sectors (17)

    Victims (162)

    Search, filter and paginate the victim timeline for Apt73. Showing 101–162 of 162.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware bri.co.id id16163 View details Indonesia Finance / Legal / Insurance pending
    Ransomware www.prixet.com id16108 View details Spain Communication / Marketing pending
    Ransomware www.minerasancristobal.com id15984 View details Bolivia, Plurinational State of Finance / Legal / Insurance pending
    Ransomware leadboxhq.com id15952 View details United States Communication / Marketing pending
    Ransomware melhorcompraclube.com.br id15931 View details Brazil Communication / Marketing pending
    Ransomware www.bms.com id15926 View details United States Healthcare / Pharma pending
    Ransomware bankily.mr id15925 View details Mauritania Finance / Legal / Insurance pending
    Ransomware azpay.me id15878 View details Azerbaijan Communication / Marketing pending
    Ransomware www.aliorbank.pl id15867 View details Poland Finance / Legal / Insurance pending
    Ransomware www.certifiedinfosec.com id15846 View details United States IT pending
    Ransomware www.siapenet.gov.br id15813 View details Brazil Finance / Legal / Insurance pending
    Ransomware www.sansirostadium.com id15770 View details Italy Other pending
    Ransomware www.polleninformation.at id15686 View details Austria Other pending
    Ransomware www.sella.eng.br id15660 View details Brazil Communication / Marketing pending
    Ransomware www.netromsoftware.ro id15629 View details Romania IT pending
    Ransomware www.protectasecurity.pe id15591 View details Peru Communication / Marketing pending
    Ransomware rao.hr id15590 View details Austria Communication / Marketing pending
    Ransomware sfr.fr id15589 View details France Telecommunications pending
    Ransomware gureco.pl id15588 View details Poland Communication / Marketing pending
    Ransomware lgpunjab.gov.in id15587 View details India Public Sector pending
    Ransomware nanolive.ch 2.0 id15285 View details Switzerland Services pending
    Ransomware emefarmario.com.br id15238 View details Brazil Agriculture / Food pending
    Ransomware liftkits4less.com id15230 View details United States Communication / Marketing pending
    Ransomware www.lamaisonducitron.com id15229 View details France Retail / E-commerce pending
    Ransomware www.baldinger-ag.ch id15228 View details Switzerland Other pending
    Ransomware www.assurified.com id15226 View details United States Construction / Real Estate pending
    Ransomware www.botiga.com.uy id15225 View details Uruguay Retail / E-commerce pending
    Ransomware www.trinitesolutions.com id15041 View details Netherlands Services pending
    Ransomware www.scopeset.de id15040 View details Germany Services pending
    Ransomware sokkakreatif.com id15039 View details Indonesia Telecommunications pending
    Ransomware www.legilog.fr id15038 View details France Services pending
    Ransomware pkaufmann.com id14947 View details United States Communication / Marketing pending
    Ransomware modplan.co.uk id14946 View details United Kingdom Manufacturing / Engineering pending
    Ransomware hpecds.com id14945 View details United States Communication / Marketing pending
    Ransomware thompsoncreek.com id14941 View details Canada Communication / Marketing pending
    Ransomware www.northernsafety.com id14940 View details United States Telecommunications pending
    Ransomware mgfsourcing.com id14939 View details United States Retail / E-commerce pending
    Ransomware appen.com id14938 View details Australia Education pending
    Ransomware filmai.in id14937 View details India Other pending
    Ransomware drizly.com id14936 View details United States Retail / E-commerce pending
    Ransomware robinhood.com id14935 View details United States Other leaked
    Ransomware thebeautyclick.co.uk id14934 View details United Kingdom Communication / Marketing pending
    Ransomware trans-logik.com id14933 View details United Kingdom Communication / Marketing pending
    Ransomware www.talonsolutions.co.uk id14932 View details United Kingdom Services pending
    Ransomware Sandro Forte Financial Support id14931 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware Susan Fischgrund id14930 View details United States Other pending
    Ransomware nanolive.ch id14929 View details Switzerland Services pending
    Ransomware rylandpeters.com id13942 View details United Kingdom Retail / E-commerce pending
    Ransomware www.pindrophearing.co.uk id13919 View details United Kingdom Other pending
    Ransomware globacap.com id13910 View details United Kingdom Communication / Marketing pending
    Ransomware www.gannons.co.uk id13017 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware Borrer Executive Search id13008 View details Switzerland Finance / Legal / Insurance pending
    Ransomware www.bigalsfoodservice.co.uk id13007 View details United Kingdom Agriculture / Food pending
    Ransomware apex.uk.net id12955 View details United Kingdom Manufacturing / Engineering leaked
    Ransomware AlphaNovaCapital id12954 View details Hong Kong Communication / Marketing pending
    Ransomware AMI Global Assistance id12953 View details United Kingdom Services pending
    Ransomware brightwayconsultants.co.uk id12688 View details United Kingdom Communication / Marketing pending
    Ransomware fortify.pro id12384 View details Canada Communication / Marketing pending
    Ransomware www.servicepower.com id12250 View details United Kingdom Energy pending
    Ransomware www.credio.eu id12249 View details Czechia Services pending
    Ransomware melting-mind.de id12174 View details Germany Services pending
    Ransomware www.trifecta.com id12112 View details United States Other pending