Polleninformation.at targeted by apt73 ransomware group

• Ransomware group: apt73
• Country: Austria
• Sector: Healthcare
• Announcement date: April 27, 2026

Apt73 claims data breach at polleninformation.at

The ransomware group known as apt73 has officially listed the Austrian healthcare platform polleninformation.at on its leak site. According to the announcement made on April 27, 2026, the threat actor claims to have successfully compromised the organization's systems and is now demanding a ransom to ensure that the stolen data is removed from the internet.

This type of announcement is a hallmark of modern ransomware operations, often referred to as double extortion. In these scenarios, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data to use as leverage. By threatening to publish or sell the stolen information, the attackers aim to pressure the victim into paying a ransom to prevent public exposure and subsequent reputational or legal damage.

The threat actor has published a formal leak notice regarding the incident. This notice states that a payment is required in order to guarantee the removal of the compromised data. While the group has made these claims, the specific amount of the ransom demand has not been disclosed in the public announcement.

Details of the alleged data leak

The information provided by the threat actor suggests that the breach involves a significant amount of data. Specifically, the records and accompanying screenshots indicate that the leaked content consists of approximately 22,140 lines of data. The nature of the information suggests that the breach has compromised sensitive user credentials and personal details.

According to the claims made by apt73, the following types of data are included in the leak:

• Personal information
• Passwords

The exposure of such information, particularly passwords, presents a high level of risk to the affected individuals. When credentials are leaked, they can be used by malicious actors to conduct further attacks, such as credential stuffing or unauthorized access to other services where users might have reused the same passwords.

About polleninformation.at

Polleninformation.at is a specialized health platform operating in Austria. Its primary function is to serve as an information hub for the public regarding pollen density and various allergy conditions. The platform provides users with up-to-date pollen data and offers guidance to assist with allergy management.

Implications and security considerations

The alleged leak indicates that sensitive user data and credentials may be at significant risk. This situation creates a landscape where affected individuals could become targets for secondary cyberattacks, such as highly targeted phishing campaigns or identity theft. Because the data involves personal details, the breach may trigger specific legal obligations under the General Data Protection Regulation (GDPR) within the European Union.

Furthermore, the exposure of this information can lead to substantial reputational damage for the organization and introduces various secondary cybersecurity risks. It is important to note that public information regarding the specific tactics, techniques, and procedures of the apt73 group remains limited.

For organizations operating within the healthcare sector, such incidents underscore the necessity of robust defensive measures. To mitigate the risks associated with data exfiltration, organizations typically focus on implementing strong identity and access management protocols, such as multi-factor authentication (MFA), to protect user credentials. Additionally, continuous monitoring of network traffic and the implementation of data loss prevention (DLP) tools can help detect and prevent unauthorized transfers of sensitive information. Regular security audits and adherence to strict data protection frameworks are essential for maintaining user trust and meeting regulatory requirements in an evolving threat landscape.