ZeroHour

eraleign (apt73)

ransomware group · aka Eraleign, Apt73 (tracking name used on this dashboard) · unknown (no widely reported attribution or country of origin) · active since 2026-06-23 (first tracked leak-site victim post per this dashboard; earlier activity unknown)

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
13
All-time (tracked)
177since 2024-04-23
Last post
07-24 11:59UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

Eraleign (tracked on this dashboard as apt73) is a data-extortion group whose leak-site activity was first tracked on 2026-06-23, with 13 victims posted through 2026-07-24. Posting is intermittent, with bursts of listings followed by multi-week gaps and zero new victims in the most recent 7- and 30-day windows. The victim set is globally distributed and sector-diverse, spanning a Brazilian government domain (gov.br), Vienna International Airport, cement, mining, IT/hosting, e-commerce, and hospitality targets, suggesting opportunistic rather than sector-focused targeting. In at least one case (Vienna Airport) the group marked the victim's data as sold to a third party rather than published, indicating data-sale monetization alongside leak-site extortion. Attribution, origin, initial-access methods, tooling, and earnings are not established in widely available public reporting and remain unknown.

Tactics & tooling
  • Publishes stolen victim data on a dedicated leak site when extortion goes unresolved
  • Sells stolen data to third parties (one tracked victim flagged 'SOLD TO 3RD PARTY' per this dashboard)
  • Opportunistic, multi-region, multi-sector victim selection based on tracked posts
  • Intermittent leak-site cadence, with multi-week gaps between victim posts
  • Initial access vectors, malware/tooling, and whether encryption is used in intrusions: unknown in public reporting
Targeted sectors
GovernmentAviation/transportBuilding materials/cementMiningIT services/hostingRetail/e-commerceGaming/hospitalityNo established sector focus (based on 13 tracked victims)
Notable public victims

Vienna International Airport (viennaairport.com) - listing flagged 'SOLD TO 3RD PARTY' per this dashboard, Brazilian federal government (gov.br) - listed on leak site per this dashboard, Kliknklik e-commerce platform (kliknklik.com) - listed on leak site per this dashboard

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
www.northernsafety.com · Oct 24, 2024Northern Safety Co., Inc. operates as a personal safety equipment distributor company. The Company offers disposable respirators, earplugs, first a...
mgfsourcing.com · Oct 24, 2024MGF Sourcing is an independent US-led global sourcing company founded in 1970. We focus on US-based specialty apparel retailers and, with our stron...
appen.com · Oct 24, 2024Registered user base of the appen.com platform (AI training company). 5 887 922 lines email addresses, employers, IP addresses, names, passwords,...
filmai.in · Oct 24, 2024Indian Movie Streaming Service Data email addresses, passwords, usernames 645 000 lines
drizly.com · Oct 24, 2024Databases of users of the E-Commerce platform "Drizly" (a platform for the sale of alcoholic beverages). 2 479 145 lines. dates of birth, device in...
robinhood.com · Oct 24, 2024Robinhood Broker Clients' Data. 7 732 244 lines of emails
thebeautyclick.co.uk · Oct 24, 2024The Beauty Click was founded in April 2018 by Chantelle Bass. A website that has a platform for both the beauty and hair specialists themselves a...
trans-logik.com · Oct 24, 2024Transense Surface Acoustic Wave or SAW sensor technology is proven to deliver accurate, real-time measurement of torque, temperature, force and pre...
www.talonsolutions.co.uk · Oct 24, 2024Talon Solutions Ltd was formed by Vince Cluderay in 2002 for the purpose of selling document management and database solutions into the UK construc...
Sandro Forte Financial Support · Oct 24, 2024Sandro Forte is a personal growth and development speaker, and one of the most respected and successful entrepreneurs in his profession, motivating...
Susan Fischgrund · Oct 24, 2024Language therapist Personal info + documents 2 GB
nanolive.ch · Oct 24, 2024Nanolive’s label-free live cell imaging and analysis platforms, consumables and services are built on technology that is 100% non-invasive, thus ...
rylandpeters.com · Aug 22, 2024Ryland Peters & Small and CICO Books is an independent, illustrated publisher creating beautifully produced books in the areas of interior design, ...
www.pindrophearing.co.uk · Aug 21, 2024We’re specialists in the diagnosis and treatment of hearing conditions, but just as important is our understanding that hearing loss can make peo...
globacap.com · Aug 21, 2024Globacap is an innovative private markets ecosystem that allows you to compress manual workflow processes, streamlining the execution of transactio...
www.gannons.co.uk · Jun 14, 2024Gannons Commercial Law Limited Catherine Gannon, then a tax solicitor at a large US law firm, looks out from their ivory tower and spots a gap in ...
Borrer Executive Search · Jun 13, 2024Borrer Executive Search is an AESC accredited boutique search and selection firm based in Lausanne, Switzerland. internal documents, agreements ...
www.bigalsfoodservice.co.uk · Jun 13, 2024Our foodservice roots trace all the way back to a butchers shop in Dublin city centre in 1966. Kepak Foodservice specialise in creating innovative,...
apex.uk.net · Jun 11, 2024Apex Engineering Service has established itself as a leading supplier of technical services to the construction industry worldwide. Passwords, int...
AlphaNovaCapital · Jun 11, 2024Private limited Company 272KB
AMI Global Assistance · Jun 11, 2024Your trusted partner for personalized, timely, and reliable medical support services worldwide. https://x.com/AMIGlobalAssist Personal data, pas...
brightwayconsultants.co.uk · May 23, 2024Brightway Consultants Ltd is a chartered surveying firm based in London. They offer comprehensive surveying services tailored to clients' individua...
fortify.pro · May 8, 2024The Canadian company has been developing high-quality and reliable software for corporate needs since 2015. They are renowned professionals of soft...
www.servicepower.com · May 2, 2024Large software development company Service Power. Great Britain. Documents of internal systems, credits to internal resources. 328 MB
www.credio.eu · May 2, 2024Czech company Credio. IT consulting, electronic document management. Credits to internal systems. 11 MB
melting-mind.de · Apr 26, 2024German company melting-mind.de. IT systems company operating throughout Europe and offering a wide range of services in all areas of information te...
www.trifecta.com · Apr 23, 2024Information: Trifecta is a trusted advisor for some of the most widely recognized and successful companies in the world. Brands choose Trifecta bas...

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .