Certifiedinfosec.com targeted by apt73 ransomware group

• Ransomware group: apt73
• Country: United States
• Sector: Professional Services
• Announcement date: April 27, 2026

Apt73 claims data breach against certifiedinfosec.com

The threat group known as apt73 has published an announcement on a leak site, claiming to possess sensitive data belonging to certifiedinfosec.com. According to the post, the group successfully targeted the organization, alleging that they have obtained a significant amount of information through their intrusion. This type of public disclosure is a common tactic used by modern ransomware actors to exert pressure on their victims.

The announcement was made on April 27, 2026, with the group claiming the attack occurred on the same day. This method of public shaming is often associated with double extortion tactics. In such scenarios, attackers do not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release. By posting the victim's name on a dedicated leak site, the threat actor aims to damage the target's reputation and force them into compliance with ransom demands.

Details of the alleged data theft

The claim made by apt73 involves a specific volume of data. The group alleges that they have exfiltrated 1.7 GB of information from the organization's infrastructure. Based on the available information, the specific content of this data remains unclear, as no further details regarding the exact nature of the files have been provided by the attackers. The group has not disclosed a ransom demand, nor have they provided a specific file count for the stolen material.

The primary focus of the leak, as indicated by the group's announcement, involves the following:

• SQL dump data

The presence of SQL dump files is particularly concerning for organizations, as these files often contain structured databases that may hold critical information. While the exact contents are currently unknown, the existence of such files suggests that the attackers may have gained access to database management systems.

About certifiedinfosec.com

Certified Information Security, also known as Certified Tech Trainers, is an organization operating within the professional services sector. The company specializes in providing professional training and certification services in several critical areas, including information security, risk management, and compliance. Their services are designed to support cybersecurity professionals on a global scale by offering various training programs and accreditations.

Potential risks and organizational implications

The alleged leak poses several significant risks to the organization. First, the exposure of SQL dump data may jeopardize the organization's operational continuity and erode customer trust. If the data contains sensitive corporate information or customer records, the impact could be widespread. Furthermore, because the organization is based in the United States, any confirmed data breach could lead to complex legal implications under federal regulations and various state-level privacy laws.

Beyond the immediate legal and operational concerns, there are secondary risks to consider. Leaked data can be utilized by malicious actors for identity theft or as the foundation for highly targeted phishing campaigns. Such attacks can further compromise the organization's security posture and its clients' safety.

For organizations in the professional services and cybersecurity training sectors, maintaining robust defensive measures is essential. Common defensive steps include implementing strict access controls, maintaining regular offline backups, and employing continuous monitoring to detect unauthorized database access. Strengthening incident response plans and ensuring compliance with data protection standards are also vital components of a comprehensive security strategy to mitigate the impact of potential breaches.