olpro.com.my listed on apt73 leak site

• Ransomware group: apt73
• Country: Malaysia
• Sector: Retail & E-Commerce
• Announcement date: April 27, 2026

The threat actor group apt73 claims a breach of olpro.com.my

The threat actor group known as apt73 has listed the Malaysian organization olpro.com.my on its leak site. According to the announcement made on April 27, 2026, the group claims to have successfully exfiltrated a significant amount of internal data belonging to the company. This type of activity is a hallmark of modern ransomware operations, where attackers move beyond simple encryption to a method known as double extortion. In such scenarios, threat actors steal sensitive information before deploying ransomware, using the threat of leaking the stolen data to pressure the victim into paying a ransom.

The group's announcement indicates that the claimed attack occurred on the same day the listing appeared, April 27, 2026. While the group has published the organization's name on their platform, no information was provided regarding a specific ransom demand. The total volume of data claimed to have been stolen by apt73 is 3.64 GB.

Details of the claimed data exfiltration

The leak announcement provides specific details regarding the types of information that have reportedly been compromised. The threat actor group claims to possess a variety of sensitive materials that could impact the daily operations and strategic interests of the victim. Based on the information provided in the leak site announcement, the compromised data includes:

• Internal documents
• Financial records
• Email communications
• Technical drawings

The presence of technical drawing samples has been noted in screenshots provided by the group. This suggests that the breach may extend into the core intellectual property of the organization, moving beyond administrative or financial records into the realm of proprietary engineering designs.

About olpro.com.my

OLPRO Engineering Sdn Bhd is an engineering company based in Malaysia. The firm specializes in the design and manufacturing of industrial equipment. Their operational focus involves the creation of metal structures and various industrial components, placing them within a sector where technical precision and proprietary designs are critical to business success.

Risk assessment and industry implications

This incident suggests that the organization's trade secrets and operational data may be at risk of exposure. The presence of financial information could potentially impact the company's supply chain and business relationships. Furthermore, the organization may face legal obligations under Malaysian data protection regulations due to the nature of the compromised data.

From a security perspective, there are several secondary risks associated with this type of leak. For instance, the leaked emails and documents could be utilized for targeted phishing campaigns, where attackers use the stolen context to craft highly convincing messages to trick employees or partners. This can lead to further unauthorized access or financial fraud.

For organizations operating in the engineering and industrial manufacturing sectors, such incidents highlight the importance of robust data protection strategies. Common defensive steps include implementing strict access controls to limit who can view sensitive technical drawings, maintaining comprehensive logging to detect unauthorized data exfiltration, and conducting regular security awareness training to help employees recognize phishing attempts. Protecting the integrity of the supply chain is also vital, as a breach in one partner can create vulnerabilities for others within the same industrial ecosystem.