Aydeniz.com listed on apt73 leak site with claims of data theft

• Ransomware group: apt73
• Country: Türkiye
• Announcement date: July 3, 2026

The threat actor known as apt73 has listed aydeniz.com on their leak site, alleging that they have obtained various corporate documents. This announcement, made on July 3, 2026, marks a significant development in the ongoing threat landscape facing Turkish conglomerates. The group claims to have access to a vast amount of information, specifically citing a file count of 4000, and is currently awaiting contact from the organization under the threat of publishing the data.

Details of the alleged breach

According to the announcement made by apt73, the group has successfully infiltrated the systems of aydeniz.com. The threat actor alleges that the stolen data includes sensitive information related to the company's infrastructure projects and its various international operations. This type of claim is characteristic of modern ransomware tactics, where attackers move beyond simple encryption to a model of double extortion. In such scenarios, attackers threaten to release sensitive data publicly if their demands are not met, increasing the pressure on the victim organization.

The group has stated that they are currently waiting for the organization to reach out to them. The threat of data publication serves as the primary lever in this negotiation process. While the specific nature of the attack remains under investigation, the group's claim suggests a targeted approach aimed at acquiring high-value corporate intelligence rather than a random opportunistic strike.

Claimed data and compromised content

The announcement provides specific details regarding the types of files that the group claims to have exfiltrated. The content is described as being highly technical and administrative in nature. Based on the information provided by the threat actor, the compromised data includes:

• Internal corporate correspondence
• Technical reports
• Project drawings
• Corporate letters

Beyond these specific categories, the group claims the stolen data contains various other forms of media and documentation, such as photos and videos. The provided screenshots released by the group suggest that technical documents and visual content may indeed have been compromised. This variety of data types indicates that the breach may have touched multiple departments, from administrative offices to technical engineering teams.

Organization profile

Aydeniz Group is a Turkish conglomerate founded in 1975. The group operates across several vital sectors, including construction, energy, and tourism. They specialize in complex infrastructure projects, dam construction, and hotel management. Given the scale and nature of these operations, the organization maintains a significant footprint in both domestic and international markets.

Risk assessment and industry implications

This alleged leak may pose a significant risk of exposing the organization's trade secrets and critical project details. For a company involved in large-scale infrastructure and engineering, the loss of technical drawings and project reports can have long-term consequences for competitive advantage and project integrity. Furthermore, the potential presence of personal data within the files could lead to legal obligations under regulations such as KVKK.

Given the company's involvement in the construction and engineering sector, this incident might negatively impact supply chain security. In complex industrial sectors, a breach at a major contractor can create ripple effects throughout the entire supply chain, potentially exposing partners and subcontractors to secondary risks. The acquired data could be utilized for secondary attacks or highly targeted phishing campaigns against employees or business partners.

While public information about the apt73 group remains limited, this incident highlights the ongoing necessity for robust defensive measures. Organizations in these sectors typically focus on enhancing their security posture through strict access controls, continuous monitoring, and comprehensive employee training to mitigate the risk of phishing. Protecting intellectual property and maintaining compliance with data protection laws remain critical priorities for large-scale conglomerates facing evolving cyber threats.