moccae.gov.ae listed on leak site by apt73

• Ransomware group: apt73
• Country: United Arab Emirates
• Sector: Government & Defense
• Announcement date: April 27, 2026

The threat group apt73 claims a data breach at moccae.gov.ae

The Ministry of Climate Change and Environment (moccae.gov.ae) has been listed on a leak site by the threat group known as apt73. According to the announcement made on April 27, 2026, the group claims to have successfully exfiltrated a significant volume of data from the organization.

The threat actor apt73 claims to have leaked approximately 30 GB of data allegedly belonging to moccae.gov.ae. The announcement states that the breach involves various types of sensitive information. The group claims to have made this data accessible via their dedicated leak site, a common tactic used in modern cyberattacks to pressure organizations.

Details of the claimed data leak

The information allegedly stolen by the threat actor includes a variety of sensitive documents and records. The group claims that the leaked dataset contains internal correspondence, letters, and various attachments. Furthermore, the group asserts that financial reports are included in the collection of data currently hosted on their site.

The specific categories of data mentioned in the claim include:

• Internal corporate correspondence
• Financial reports
• Employee data
• Animal health license documents

While the group has provided details regarding the volume of the data, no information was given regarding the specific ransom demand or the exact number of files contained within the 30 GB dataset.

About the Ministry of Climate Change and Environment

The Ministry of Climate Change and Environment of the United Arab Emirates is the government body responsible for managing the country's environmental policies, climate change strategies, and sustainability goals. It operates in areas such as the conservation of natural resources, food security, and the maintenance of biodiversity.

Potential implications and organizational risks

This incident may pose risks to the institution's operational security and employee privacy. The license and employee data allegedly leaked could potentially be exploited for identity theft or targeted phishing attacks. Given that the institution is a government entity, the leak may have indirect implications for national security and public policy.

In the context of modern cyber threats, such incidents often follow the pattern of double extortion. In these scenarios, threat actors not only encrypt an organization's systems but also steal sensitive data to use as leverage. By threatening to release the information on public leak sites, attackers aim to maximize the pressure on the target to meet their demands.

Information about the apt73 group is limited. For organizations operating within the government and defense sector, such breaches highlight the critical importance of robust data protection frameworks. Organizations in this sector may need to take necessary measures in accordance with data breach notification requirements and local regulations to mitigate the impact of such incidents and protect sensitive national and personal information.