apt73 ransomware group lists federalbank.co.in (PART1) on its leak site

• Ransomware group: apt73
• Country: India
• Sector: Financial Services
• Announcement date: December 24, 2024

Apt73 claims to have leaked Federal Bank customer data

The threat actor group known as apt73 has announced a data breach involving federalbank.co.in. According to an announcement made on their leak site on December 24, 2024, the group claims to have published a portion of data belonging to the organization. This incident is categorized as a data leak, and the group claims the attack occurred on the same day the announcement was posted.

The group's claim involves a significant volume of information, with the group alleging that a total of 637,895 lines of customer records have been compromised. While the group has published this information, public information regarding the specific identity and methods of apt73 remains limited. The group appears to be releasing the data in parts, a method that is often used by threat actors to exert pressure on the targeted organization.

Details of the alleged data compromise

The data allegedly stolen and subsequently published by apt73 contains highly sensitive information regarding the bank's clientele. Based on the sample table provided by the group, the compromised records include a wide variety of personally identifiable information (PII). This type of data is highly valuable on the dark web due to its potential for misuse in various fraudulent activities.

The specific data fields identified in the claim include:

• Customer names
• Customer IDs
• Dates of birth
• PAN numbers
• Address details
• Passport numbers
• Driving license numbers
• Contact information
• Voter ID details

The presence of such diverse identifiers—ranging from national ID numbers like PAN and Voter ID to travel documents like passports—suggests a deep level of access to the organization's customer databases.

About Federal Bank

Federal Bank is a major Indian private-sector commercial bank. It provides a wide range of banking and financial services to retail and corporate customers. As a significant player in the Indian financial services sector, the institution handles a vast amount of sensitive customer information required for daily banking operations and regulatory compliance.

Potential impact and industry implications

The alleged leak of such sensitive information carries significant risks for the affected customers. The exposure of names, addresses, and government-issued identification numbers could make individuals highly vulnerable to identity theft and various forms of financial fraud. Furthermore, the sensitivity of the shared data may increase the likelihood of customers being targeted by sophisticated phishing attacks, where attackers use the stolen details to gain trust and extract further credentials or funds.

For the institution, the consequences of such a breach are multifaceted. Beyond the immediate operational disruption that a cyberattack can cause, the bank may face potential legal consequences given the strict data protection regulations in place in India. Additionally, the loss of customer trust and the resulting damage to the institution's reputation can have long-term effects on its business operations.

In the broader context of cyber threats, this incident highlights the ongoing risks faced by the financial services sector. Ransomware and data extortion tactics often involve a