Banak.com listed on apt73 leak site

• Ransomware group: apt73
• Country: Türkiye
• Sector: Financial Services
• Announcement date: April 27, 2026

The threat group apt73 claims responsibility for the banak.com breach

The Spanish furniture and home decor retailer banak.com has been listed on a ransomware leak site by the threat group known as apt73. According to the announcement made on April 27, 2026, the group claims to have successfully executed an attack against the organization, resulting in the theft of a specific volume of data.

The group alleges that the breach occurred on the same day the announcement was posted. While the specific details regarding a ransom demand were not provided in the leak site announcement, the nature of the listing suggests that a ransom process may have been initiated by the group regarding the potential publication of the stolen files. This pattern is common in modern cyberattacks, where threat actors use the threat of leaking sensitive information to pressure organizations into paying a ransom, a tactic often referred to as double extortion.

Details of the claimed data theft

The apt73 group claims to be in possession of approximately 300 MB of data belonging to banak.com. The group alleges that the compromised information includes various internal documents, such as letters, attachments, and financial reports. Based on the screenshots provided by the attackers, the stolen information appears to include several categories of sensitive corporate documentation.

The specific types of data identified in the claim include:

• Financial reports
• Logistics data
• Internal correspondence
• Catalog data

The visual evidence provided by the group specifically points to the presence of logistics data, financial summary tables, cash flow reports, and catalogs containing information regarding fabric samples. The breadth of this data suggests that the attackers may have gained access to operational and administrative layers of the company's digital infrastructure.

About banak.com

Banak is a Spain-based furniture and home decor retailer. The company specializes in the sale of various home furnishings, furniture designs, and decorative products. As an organization operating within the retail and home goods sector, the company manages a variety of logistical, financial, and customer-facing operations.

Potential implications and organizational risks

This alleged leak may pose a significant risk of exposure for the personal data of both employees and customers at banak.com. Because the company is based in Spain, the incident may lead to legal consequences under the European Union's General Data Protection Regulation (GDPR), which mandates strict protocols for data protection and breach notification. Organizations operating within the EU must adhere to these regulations to avoid significant penalties following a data compromise.

Furthermore, the publication of sensitive financial data could create a competitive disadvantage for the company and potentially facilitate secondary attacks. When financial summaries and cash flow reports are made public, they can be used by malicious actors to conduct more targeted social engineering or business email compromise (BEC) attacks. Publicly available information about the company's internal operations can provide a roadmap for future exploitation.

In such scenarios, organizations often face the necessity of fulfilling data breach notification requirements and informing the affected parties. Defensive measures for companies in the financial and retail sectors typically involve implementing robust encryption, maintaining strict access controls, and conducting regular audits of sensitive data repositories to mitigate the impact of such incidents.