apt73 ransomware group lists baldinger-ag.ch on its leak site

• Ransomware group: apt73
• Country: Switzerland
• Sector: Manufacturing
• Announcement date: April 27, 2026

Data leak claim against Baldinger Fahrzeugbau

The threat actor group known as apt73 has listed the Swiss-based company Baldinger Fahrzeugbau on its leak site. According to the announcement, the group claims to have obtained internal data belonging to the organization. This incident follows a pattern common in modern cyberattacks where threat actors use leak sites to pressure victims by exposing sensitive information.

The claim was made on April 27, 2026. While the group has published a listing, public information regarding the specific activities and background of the apt73 group remains limited. Such listings are often part of double extortion tactics, where attackers not only encrypt systems but also threaten to release stolen data to maximize leverage against the target organization.

Details of the alleged breach

The threat actor group alleges that it has compromised a significant amount of internal information. Specifically, the group claims to have obtained 15,052 rows of data. The announcement identifies the breach as a data leak, and the group is currently exposing this information on their platform.

Based on the claims made by the group, the allegedly leaked data includes a variety of sensitive information types. The compromised data is said to consist of:

• Customer contact information
• Customer order records
• Payment details

The specific contents of the leaked files are described as including customer order information, invoice prefixes, first and last names, email addresses, telephone numbers, fax numbers, shipping address details, and payment information. No information was provided regarding a ransom demand.

About Baldinger Fahrzeugbau

Baldinger Fahrzeugbau is a Swiss company that has been operating in the manufacturing sector since 1970. The company specializes in the field of vehicle body manufacturing and specialized transport equipment. Their operational focus is centered on the development of innovative and high-quality transport solutions, particularly catering to the needs of light commercial vehicles.

Potential impact and industry implications

Given the nature of the data allegedly leaked, there are significant risks for the affected parties. The exposure of names, contact details, and payment information may lead to an increased risk of identity theft and targeted phishing attacks against the customers involved. When personal and financial details are leaked, attackers often use them to craft highly convincing social engineering campaigns.

Because the organization is based in Switzerland, this incident may lead to legal consequences under the Federal Act on Data Protection (FADP). The company may be required to fulfill specific data breach notification obligations and may need to inform all affected parties regarding the exposure of their information.

Beyond the immediate legal and privacy concerns, such leaks can have broader consequences. For a manufacturing company, a data breach can negatively impact commercial reputation and potentially compromise supply chain security. In the manufacturing sector, maintaining the integrity of data is crucial for protecting proprietary processes and maintaining trust with logistics partners and clients.

Organizations in this sector can take several defensive steps to mitigate such risks. Implementing robust encryption for data at rest and in transit can help protect sensitive information even if a perimeter is breached. Furthermore, maintaining strict access controls and monitoring for unusual data exfiltration patterns are essential components of a modern security posture. Organizations should also ensure they are prepared to meet regulatory notification requirements to maintain transparency and comply with national laws like the FADP.