eraleign (apt73)
ransomware group · aka Eraleign, Apt73 (tracking name used on this dashboard) · unknown (no widely reported attribution or country of origin) · active since 2026-06-23 (first tracked leak-site victim post per this dashboard; earlier activity unknown)
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
13
All-time (tracked)
177since 2024-04-23
Last post
07-24 11:59UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Eraleign (tracked on this dashboard as apt73) is a data-extortion group whose leak-site activity was first tracked on 2026-06-23, with 13 victims posted through 2026-07-24. Posting is intermittent, with bursts of listings followed by multi-week gaps and zero new victims in the most recent 7- and 30-day windows. The victim set is globally distributed and sector-diverse, spanning a Brazilian government domain (gov.br), Vienna International Airport, cement, mining, IT/hosting, e-commerce, and hospitality targets, suggesting opportunistic rather than sector-focused targeting. In at least one case (Vienna Airport) the group marked the victim's data as sold to a third party rather than published, indicating data-sale monetization alongside leak-site extortion. Attribution, origin, initial-access methods, tooling, and earnings are not established in widely available public reporting and remain unknown.
Tactics & tooling
- Publishes stolen victim data on a dedicated leak site when extortion goes unresolved
- Sells stolen data to third parties (one tracked victim flagged 'SOLD TO 3RD PARTY' per this dashboard)
- Opportunistic, multi-region, multi-sector victim selection based on tracked posts
- Intermittent leak-site cadence, with multi-week gaps between victim posts
- Initial access vectors, malware/tooling, and whether encryption is used in intrusions: unknown in public reporting
Targeted sectors
GovernmentAviation/transportBuilding materials/cementMiningIT services/hostingRetail/e-commerceGaming/hospitalityNo established sector focus (based on 13 tracked victims)
Notable public victims
Vienna International Airport (viennaairport.com) - listing flagged 'SOLD TO 3RD PARTY' per this dashboard, Brazilian federal government (gov.br) - listed on leak site per this dashboard, Kliknklik e-commerce platform (kliknklik.com) - listed on leak site per this dashboard
Estimated earnings
No public figure.
Leak-site victims177 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| bg.ac.rs | · Mar 11, 2026 | University of Belgrade. Internal documents, letters, attachments, financial reports. Total size: ... |
| novoair-bd.com | · Mar 11, 2026 | novoair-bd.com is the website of Novoair, a private airline based in Bangladesh. Internal documen... |
| banak.com | · Mar 10, 2026 | Banak is a Spanish company that sells furniture and home decor. Internal documents, letters, atta... |
| bankasia-bd.com | · Mar 10, 2026 | bankasia-bd.com is the official website of Bank Asia PLC, a commercial bank in Bangladesh. Intern... |
| amtaar.com | · Feb 18, 2026 | Amtaar Investment Company. Organization dedicated to transforming desert land into thriving food-... |
| corahperu.org | · Feb 17, 2026 | corahperu.org is the official website of Proyecto Especial CORAH, a Peruvian government project a... |
| mahidol.ac.th | · Feb 17, 2026 | Mahidol University is a major public research university established in Thailand with deep histor... |
| compensatii.gov.md | · Jan 30, 2026 | compensatii.gov.md is the official online government platform of the Republic of Moldova, created... |
| hl.co.uk | · Jan 16, 2026 | The hl.co.uk domain is owned by Hargreaves Lansdown (legal name "Hargreaves Lansdown Asset Manage... |
| tni.mil.id | · Feb 25, 2025 | DATABASE OF NATIONAL INDONESIAN ARMY | NAMA NRP PANGKAT KORPS GRADE SATUAN JABATAN TGL LAH... |
| autogedal.ro | · Feb 18, 2025 | AutoGedal, the destination of confidence for passengers of travel, nature and adventure . With a ... |
| ome.tv | SOLD | · Feb 10, 2025 | SOLD TO 3RD PARTY | With OmeTV video chat you can strike up a conversation with strangers, meet i... |
| boostheat.com | · Feb 5, 2025 | Industrial Machinery & Equipment | internal files, docs, employees' info, clients' info |
| India car owners | · Feb 4, 2025 | Name / Mobile No / Address / Pin Code / City / Submodel / Model / Assettype / Misstatus / Tenor ... |
| mistralsolutions.com | · Feb 4, 2025 | Mistral Solutions is a certified technology design and systems engineering company (Embedded Syst... |
| coel.com.mx | · Feb 3, 2025 | ID,Name,Email,Group,Phone,ZIP,Country,State/Province,"Customer Since","Web Site","Confirmed email... |
| realtaxcanada.com | · Feb 3, 2025 | Accounting Services · Canada | clients' data. 5 GB |
| icicibank.com | SOLD | · Jan 30, 2025 | SOLD TO 3RD PARTY | Banking · India |
| malindoair.com | SOLD | · Jan 30, 2025 | SOLD TO 3RD PARTY | Airlines, Airports & Air Services · Bangladesh | "Passenger Id", "Name", "Re... |
| ome.tv | · Jan 30, 2025 | With OmeTV video chat you can strike up a conversation with strangers, meet interesting people, a... |
| icicibank.com | · Jan 21, 2025 | Banking · India |
| malindoair.com | · Jan 20, 2025 | Airlines, Airports & Air Services · Bangladesh | "Passenger Id", "Name", "Reservation", "Date Of... |
| fol-23.fr | · Jan 17, 2025 | The Federation of Secular Works of the Creuse brings together each year between 230 and 250 assoc... |
| betclic.com | · Jan 15, 2025 | Online Betting - "LastName","Address","City","State","ZipCode","Country","Email","Phone" |
| azpay.me | SOLD | · Jan 9, 2025 | SOLD TO A 3RD PARTY | Azape began its journey in 2018 by developing customized projects for vario... |
| pnp.co.za | · Jan 9, 2025 | Pick n Pay Group Ltd. is a South African retailer. It operates three brands – Pick n Pay, Boxer... |
| trifecta.com | · Jan 4, 2025 | Information: Trifecta is a trusted advisor for some of the most widely recognized and successful ... |
| credio.eu | · Jan 4, 2025 | Czech company Credio. IT consulting, electronic document management. Credits to internal systems.... |
| servicepower.com | · Jan 4, 2025 | Large software development company Service Power. Great Britain. Documents of internal systems, c... |
| bigalsfoodservice.co.uk | · Jan 4, 2025 | Our foodservice roots trace all the way back to a butchers shop in Dublin city centre in 1966. Ke... |
| gannons.co.uk | · Jan 4, 2025 | Gannons Commercial Law Limited Catherine Gannon, then a tax solicitor at a large US law firm, lo... |
| pindrophearing.co.uk | · Jan 4, 2025 | We’re specialists in the diagnosis and treatment of hearing conditions, but just as important i... |
| talonsolutions.co.uk | · Jan 4, 2025 | Talon Solutions Ltd was formed by Vince Cluderay in 2002 for the purpose of selling document mana... |
| northernsafety.com | · Jan 4, 2025 | Northern Safety Co., Inc. operates as a personal safety equipment distributor company. The Compan... |
| legilog.fr | · Jan 4, 2025 | Management software for culture, businesses, religion and bishoprics. 10 GBs crm systems / expo... |
| scopeset.de | · Jan 4, 2025 | We offer support services for all our developed solutions and tools with an emphasize on direct a... |
| trinitesolutions.com | · Jan 4, 2025 | Trinite Solutions was established in 2003. Its mission is to develop, market and implement busine... |
| assurified.com | · Jan 4, 2025 | Assurified revolutionizes risk management for multifamily real estate. Our AI-powered solutions a... |
| baldinger-ag.ch | · Jan 4, 2025 | Since 1970, Baldinger Fahrzeugbau has stood for continuous innovation and the highest quality. We... |
| lamaisonducitron.com | · Jan 4, 2025 | Lemon product store. |
| protectasecurity.pe | · Jan 4, 2025 | Protecta Security provides insurance, microfinance and financial services. Internal docs, financi... |
| sfr.fr | · Jan 4, 2025 | SFR is a French telecommunications company. It is both the second oldest mobile network operator ... |
| netromsoftware.ro | · Jan 4, 2025 | Romanian software development company. Export CRM |
| sella.eng.br | · Jan 4, 2025 | mentoring programs for managers. Internal and personal docs. 0.3 GB |
| polleninformation.at | · Jan 4, 2025 | Pollen situation informational site. Personal info + Pass. 22140 lines |
| sansirostadium.com | · Jan 4, 2025 | UEFA personal contact data. |
| fpj.com.py PART1 | · Jan 4, 2025 | Paraguayan bank. Personal info. _____________________________ Part 1 |
| siapenet.gov.br | · Jan 4, 2025 | Today, SIAPE processes the remuneration of civil servants, regulated both by the uniform federal ... |
| fpj.com.py PART2 | · Jan 4, 2025 | Paraguayan bank. Personal info. _____________________________ Part 2 |
| certifiedinfosec.com | · Jan 4, 2025 | Certified Information Security is a registered trade name for Certified Tech Trainers (CTT) (D-U-... |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .