apt73 ransomware group lists grupopetersen.com.ar on its leak site

• Ransomware group: apt73
• Country: Argentina
• Sector: Agriculture and Food Production
• Announcement date: May 21, 2026

The threat group known as apt73 has listed the Argentina-based organization Grupo Petersen on its leak site. According to the announcement, the group claims to have compromised a significant amount of data belonging to the company, involving approximately 10,000 files.

The details of the claim

On May 21, 2026, the threat actor apt73 published an official announcement targeting the domain grupopetersen.com.ar. The group claims that 10,000 files related to the financial and industrial operations of the company have been compromised. This announcement was made alongside a countdown timer, a common tactic used by ransomware groups to pressure victims into meeting their demands before the data is released publicly.

The group has demanded that the company establish contact to resolve the situation. While the group has initiated this public pressure via their leak site, public information regarding the specific identity, methods, or background of apt73 remains limited. No specific ransom demand has been disclosed in the current listing.

Data allegedly compromised in the breach

The claims made by the threat actor suggest that the stolen information is highly sensitive. Based on screenshots provided by the group, the data is said to include a variety of corporate and financial documents. The group has shared sample images that appear to show documents resembling invoices and purchase orders, indicating that the breach may impact the company's administrative and transactional records.

The files allegedly stolen include:

• Financial reports
• Internal documents
• Corporate records
• Invoices
• Purchase orders

About Grupo Petersen

Grupo Petersen is a multidisciplinary financial and industrial group based in Argentina. The company maintains a broad operational footprint, working across several critical sectors including banking, construction, energy, and agriculture.

Potential impact and organizational risks

The claims made by apt73 suggest that the company's financial and operational data may be at risk of exposure. Such a leak could potentially lead to the disclosure of trade secrets and result in significant reputational damage for the organization. Furthermore, if personal data is confirmed to have been leaked, the company may face legal consequences under Argentine data protection regulations.

The exposure of such information can create secondary risks, as any employee or customer information contained within the leaked data could create opportunities for identity theft and targeted phishing attacks. The group appears to be employing a double-extortion strategy, a method where attackers not only encrypt a victim's data but also steal it, threatening to leak it to increase the pressure to pay.

This strategy poses a direct threat to an organization's operational continuity. In such scenarios, organizations often focus on defensive measures such as robust data backup strategies, strict access controls, and continuous monitoring of their networks to detect unauthorized data exfiltration. Strengthening incident response plans and ensuring compliance with regional data protection laws are also critical steps for organizations operating in complex industrial and financial sectors to mitigate the impact of such threats.