Kliknklik.com listed on apt73 leak site following alleged data breach

• Ransomware group: apt73
• Country: Indonesia
• Sector: Retail & E-Commerce
• Announcement date: June 23, 2026

A data breach claim against kliknklik.com

The Indonesia-based retailer kliknklik.com has been listed on a leak site by the threat group known as apt73. This announcement, made on June 23, 2026, involves an alleged data breach targeting the organization. The threat actor claims that the incident was identified on the same day the announcement was posted.

The group's listing follows a common pattern seen in modern cyberattacks where threat actors utilize leak sites to pressure organizations. These sites are often used in double extortion schemes, where attackers not only encrypt an organization's systems but also steal sensitive data and threaten to publish it publicly unless a ransom is paid. In such scenarios, the threat actor typically provides a countdown timer and specific contact channels to the victim organization to prevent the full publication of the stolen information.

Details of the alleged incident

According to the claims made by apt73, the breach resulted in the compromise of various corporate and personal documents. The group has provided screenshots intended to demonstrate the nature of the stolen information. These screenshots reportedly show the presence of several types of sensitive files, including personal documents, financial documents, tables, and references.

The scale of the alleged theft is significant. The threat actor claims that the breach includes the following data types:

• Personal documents
• Financial documents
• Emails
• Customer data

Furthermore, the group asserts that the leak contains over 12,500 emails and more than 2,000 information files. No specific information was provided regarding the total size of the data or a specific ransom demand.

About kliknklik.com

Kliknklik is an Indonesia-based online retailer and distributor of computer equipment. The company specializes in the sale of laptops and various technological devices, serving the consumer and business markets within the region.

Risks and organizational implications

The alleged leak poses several significant risks to both the organization and the individuals involved. For the customers and employees of kliknklik.com, the exposure of personal and financial documents can lead to severe consequences, such as identity theft and the execution of targeted phishing attacks. When personal information is leaked, attackers often use it to craft highly convincing fraudulent communications designed to trick individuals into revealing even more sensitive credentials or transferring funds.

For the organization itself, the public disclosure of such data can lead to a negative impact on its commercial reputation. Furthermore, the exposure of sensitive information can potentially lead to secondary extortion attempts, where attackers attempt to leverage the leaked data for additional demands. Given that the company operates in Indonesia, the incident may present challenges regarding compliance with relevant local data protection regulations.

In the wake of such incidents, it is generally considered advisable for organizations to conduct a thorough review of their security measures to identify and remediate vulnerabilities. Additionally, notifying the affected parties is a critical step in mitigating the impact of the breach and helping individuals protect themselves from subsequent fraudulent activities.