Netromsoftware.ro listed on apt73 leak site

• Ransomware group: apt73
• Country: Romania
• Sector: Technology
• Announcement date: April 27, 2026

A new data breach claim targeting netromsoftware.ro

The threat actor group known as apt73 has officially listed the Romanian software development company netromsoftware.ro on its leak site. According to the announcement made on April 27, 2026, the group claims to have successfully breached the organization's systems, resulting in the unauthorized acquisition of various files. This incident follows a common pattern seen in modern cyberattacks where threat actors use public-facing leak sites to pressure victims.

The group's announcement includes a countdown timer and specific contact channels. These elements are typically utilized by ransomware groups to create a sense of urgency, intended to prevent the publication of stolen data by forcing the victim into negotiations. While the group claims to have gained access to the company's internal systems, the full extent of the breach remains to be verified.

Details of the claimed data theft

The information provided by the threat actor includes a screenshot displaying a list of files that allegedly belong to the victim. Although the full content and the total volume of the leaked data have not been specified, the filenames provide insight into the potential nature of the stolen information. The list includes several items such as 'PASSWORD_SVG.files', 'ERA-7_Inventory Overview', 'Import.changesto', '20202208 Excel', 'Alfa Land Compact', and 'Inventario de Consumibles'.

Based on these filenames, the data is believed to include sensitive technical information. The specific categories of affected data identified include:

• Technical inventory data
• Configuration files

The presence of files related to inventory and configuration suggests that the attackers may have targeted the operational backbone of the company's digital environment.

About netromsoftware.ro

Netrom Software is a professional software development and outsourcing company located in Romania. The organization specializes in providing custom software solutions and CRM systems, alongside a variety of other technological services to its clients. As a provider of technological services, the company operates within a sector that handles significant amounts of digital infrastructure and client-related data.

Risk assessment and organizational implications

This potential leak presents significant risks to the company's intellectual property and its overall operational security. Because the organization is based in Romania, this incident may lead to legal consequences under the EU General Data Protection Regulation (GDPR), which governs how personal data must be protected and how breaches must be reported. If the stolen files contain personal data belonging to employees or customers, the company may face secondary risks, such as identity theft or the launch of targeted phishing attacks against its stakeholders.

While public information regarding the specific tactics and identity of the apt73 group remains limited, their use of ransomware tactics indicates a threat to the company's business continuity. In such scenarios, organizations often face the challenge of maintaining operations while dealing with the fallout of a data leak.

In the broader context of cybersecurity, such incidents highlight the importance of robust defensive measures. Organizations in the technology sector often implement strategies such as multi-factor authentication, regular security audits, and strict access controls to mitigate the risk of unauthorized entry. Furthermore, maintaining comprehensive backups and incident response plans is a standard practice to ensure that business operations can continue even if a breach occurs. As ransomware groups continue to use double extortion tactics—where they both encrypt data and threaten to leak it—the importance of protecting both the integrity of systems and the confidentiality of data has never been higher.