egov.sc listed on apt73 leak site claiming data breach

• Ransomware group: apt73
• Country: Seychelles
• Sector: Government & Defense
• Announcement date: April 27, 2026

The Seychelles government portal listed on apt73 leak site

The Seychelles e-Government portal, egov.sc, has been listed on the leak site of the threat group known as apt73. According to the announcement made on April 27, 2026, the group claims to have exfiltrated a significant amount of data from the platform.

The threat actor, identified as apt73, has officially listed the egov.sc portal on its dedicated leak site. The group claims that the total volume of the exfiltrated data amounts to 14 GB. This data is alleged to include various internal documents. It is important to note that information regarding this specific threat group remains limited within the public domain, making detailed attribution or technical analysis difficult based on currently available public information.

Alleged data contents and scope of the breach

The announcement provided by the threat actor includes screenshots intended to demonstrate the nature of the stolen information. Based on these provided images, the alleged leaked data is said to comprise several sensitive categories of information. The scope of the data claimed by apt73 includes:

• Internal documents
• Financial documents
• Emails
• Images of identification cards

While the group has provided these screenshots to support their claims, the specific file counts and the exact nature of the ransom demand remain unknown, as no information regarding these details was provided in the announcement.

The egov.sc platform profile

The Seychelles e-Government portal, egov.sc, serves as an official platform for the nation. It is designed to provide various online public services and digital government solutions to the citizens of Seychelles.

Potential implications and security risks

The alleged exposure of data belonging to a government entity carries significant risks, particularly regarding the personal information of citizens. Such a breach can create opportunities for malicious actors to engage in identity theft and launch targeted phishing attacks against the population. Because the target is a government institution, the leak may have negative implications for national security and the continuity of essential public services.

Furthermore, the institution may face legal sanctions related to compliance with data protection regulations within Seychelles. Beyond the immediate impact on the government, the public release of this data could damage the institution's reputation and create secondary risks for supply chain security. In such scenarios, organizations often face the challenges of double extortion, a tactic where attackers not only encrypt systems but also threaten to leak sensitive data to pressure the victim into paying a ransom.

For organizations operating within the government and defense sectors, maintaining robust security postures is critical. Defensive measures typically involve implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular security awareness training for staff to mitigate the risk of phishing. Additionally, ensuring strong data encryption for both resting and transit data can help protect sensitive information even if a perimeter is breached.