apt73 ransomware group lists www.sella.eng.br on its leak site

• Ransomware group: apt73
• Country: Brazil
• Sector: Professional Services
• Announcement date: November 26, 2024

Apt73 claims to have stolen data from sella.eng.br

The threat group known as apt73 has listed the organization sella.eng.br on its leak site. According to the announcement made on November 26, 2024, the group claims to have successfully executed a data breach against the entity. The group alleges that they have obtained approximately 0.3 GB of data during the attack, which they claim occurred on the same date as the announcement.

The threat actor's primary objective in such listings is often to exert pressure on the targeted organization. By publishing information on a public leak site, ransomware groups attempt to damage the reputation of the victim and coerce them into meeting certain demands. While the group has made these claims, information regarding the specific identity and capabilities of apt73 remains limited.

Details of the alleged data compromise

The announcement made by apt73 alleges that the breach involves sensitive information related to the organization's core operations. Specifically, the group claims that internal and personal documents associated with the organization's mentoring programs for managers have been compromised. The group has provided screenshots to support their claims, which show tabular data containing various types of information.

Based on the evidence provided in the leak site announcement, the following types of data are reportedly involved:

• User credentials
• Email addresses
• Internal documents
• Personal documents

The presence of file directories and user-specific information in the screenshots suggests a potential compromise of organizational structure and communication channels. It is important to note that the specific ransom demand and the total file count have not been disclosed by the threat actor.

About sella.eng.br

Sella is a Brazil-based organization that provides mentoring programs for managers and professional development services. The organization focuses on professional growth and leadership training within the professional services sector.

Potential impact and organizational implications

The alleged leak of this data may pose significant risks to the organization's employees and the participants of its mentoring programs. Specifically, the exposure of usernames, email addresses, and personal documents increases the risk of identity theft and targeted phishing attacks. Such attacks often leverage stolen information to gain further access to corporate networks or to defraud individuals.

Because the organization is based in Brazil, this incident may trigger legal repercussions and compliance processes under the LGPD (General Data Protection Law), depending on the specific nature and sensitivity of the leaked data. Organizations facing such threats often need to initiate urgent digital forensic investigations to determine the true accuracy and scope of the breach. Such investigations are critical for understanding how the perimeter was breached and what specific assets were accessed.

Furthermore, a data breach of this nature can have lasting negative impacts on an organization's corporate reputation. The loss of trust among business partners and clients is a common consequence of public data exposure. In the professional services sector, where trust and confidentiality are paramount, maintaining data integrity is essential for business continuity. Organizations typically respond to these threats by strengthening their security posture, implementing multi-factor authentication, and enhancing monitoring capabilities to detect unauthorized access more effectively.