apt73 ransomware group lists novoair-bd.com on its leak site

• Ransomware group: apt73
• Country: Bangladesh
• Sector: Transportation
• Announcement date: April 27, 2026

Apt73 claims data leak involving Novoair

The threat group known as apt73 has published an announcement on a leak site, claiming to have leaked approximately 10 GB of data belonging to the Bangladesh-based airline Novoair. The announcement, which appeared on April 27, 2026, suggests a significant breach of the organization's digital assets. While the group has made these claims, information regarding the specific identity and background of apt73 remains limited in the public domain.

This type of activity is characteristic of modern ransomware operations, where threat actors often utilize leak sites to exert pressure on their targets. In such scenarios, the group typically claims to have exfiltrated sensitive information during a breach, which is then threatened with public disclosure unless certain demands are met. This tactic is frequently used to maximize the impact of an attack on the victim organization.

Details of the alleged breach

According to the announcement made by apt73, the group has targeted the domain novoair-bd.com. The threat actor claims to have successfully obtained a variety of sensitive internal materials. The group specifies that the volume of the alleged leaked data amounts to approximately 10 GB. The announcement includes claims that the stolen information consists of several types of sensitive corporate data, including internal documents, emails, and financial reports.

Furthermore, the announcement suggests that the breach includes various attachments and files. Supporting the group's claims, a provided screenshot displays images that resemble telecommunication invoices. The specific details regarding the exact file count and the specific ransom demand have not been provided in the announcement.

The types of data allegedly involved in this incident include:

• Internal documents
• Emails
• Financial reports
• Invoices

About Novoair

Novoair is a private airline based in Bangladesh. The company provides domestic and international flight services, operating within the transportation sector to connect various destinations through its flight network.

Potential impact and industry implications

The publication of the alleged data may negatively impact the organization's operational continuity and commercial reputation. The disclosure of financial reports and emails could lead to the exposure of the organization's strategic plans and customer data to unauthorized third parties. Additionally, the organization may face legal obligations under data protection regulations in Bangladesh. The leaked data, which potentially contains personal information, could create secondary risks such as identity theft or targeted phishing attacks for both employees and customers.

The group's apparent use of double-extortion tactics—where data is both encrypted and stolen to increase leverage—may increase pressure on the organization and raise the likelihood of permanent data exposure. In the aviation and transportation sector, such breaches can be particularly disruptive due to the high volume of sensitive passenger information and the critical nature of operational logistics.

To defend against such threats, organizations often implement multi-layered security strategies. This includes robust encryption for data at rest and in transit, strict access controls to limit the scope of potential lateral movement, and continuous monitoring of network traffic to detect unauthorized exfiltration. Furthermore, regular security awareness training is essential to help employees recognize phishing attempts, which are often the initial entry point for such attacks. Maintaining comprehensive backups and a well-tested incident response plan are also critical components of a resilient cybersecurity posture.