Apos ransomware group lists ACMARK on leak site
The threat actor known as Apos claims to have compromised data belonging to the consulting firm ACMARK and has listed the company on its leak site.
- Published
- 2 min read
- 2 min read
- Ransomware group: Apos
- Country: Czechia
- Sector: Professional Services
- Announcement date: August 15, 2025
The threat actor known as Apos has claimed to have compromised data belonging to the consulting firm ACMARK. The organization has been officially listed on the group's leak site, signaling a potential significant data breach involving the professional services provider.
The claims made by Apos
According to the announcement made on August 15, 2025, the Apos group alleges that they successfully gained access to the systems of ACMARK on June 24, 2025. This indicates that the threat actors may have maintained presence within the network for a considerable period before the public announcement was made on their leak site.
The threat actor is currently demanding a ransom of 5,000,000 USD. This demand is issued under the threat of publishing the company's data to the public. While the group has taken this action, public information regarding the specific identity and operational methods of the Apos group remains limited.
Details regarding the alleged data breach
At this stage of the incident, the threat actor has not provided specific details or samples regarding the nature of the allegedly compromised data. No information has been released concerning the total volume of the data or the specific file count involved in the breach.
The listing names no specific data types that have been targeted or stolen.
About ACMARK
ACMARK s.r.o. is a Czech-based company that was established in 2009. The firm specializes in providing consulting services designed to support various marketing and business processes for different organizations. Additionally, the company supplies information technology solutions intended to help its clients develop their business activities and improve overall profitability.
Analysis and implications for the sector
This situation may pose a significant risk of exposure for trade secrets and sensitive client information held by ACMARK. Given the specific sector in which the company operates, such an incident could lead to various legal obligations under data protection regulations, such as the General Data Protection Regulation (GDPR).
The potential publication of such data might increase the risk of secondary attacks for the company's clients, as stolen information is often used to facilitate further social engineering or phishing campaigns. Furthermore, such an incident could result in significant reputational damage to the organization.
The high ransom demand issued by the threat actor suggests that a double extortion tactic may be employed. In a double extortion scenario, attackers do not merely encrypt data to disrupt operations, but they also steal sensitive information to use as leverage, threatening to leak it if the ransom is not paid. This tactic increases the pressure on organizations to comply with financial demands.
Organizations operating in the professional services sector often handle vast amounts of proprietary client data, making them attractive targets for such tactics. To mitigate these risks, organizations typically focus on robust data protection strategies, including regular backups, strict access controls, and comprehensive monitoring of network activities to detect unauthorized access early.