Ransomware Group: APT73

VICTIM NAME: lgpunjab[.]gov[.]in

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the APT73 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak pertaining to the Government of Punjab, with a focus on the website lgpunjab.gov.in, reveals sensitive information that has been compromised by the attacker group identified as ‘apt73’. The leak contains a backup of a Customer Relationship Management (CRM) system, totaling approximately 0.2 GB. The data breach surfaced on November 23, 2024, with the contents including details on 448 users associated with the system. No specific compromise date is noted in the leak; therefore, the publication date is taken as the effective date of discovery.

The report indicates that the exposed information relates to users and potential access complications within the public sector, specifically in the context of government operations in India. There are no known employees or third-party affiliations reported in the leak, focusing solely on the internal data. Additionally, the page includes a screenshot of the leak, illustrating potentially sensitive documents, although explicit details remain undisclosed. Given the context of the public sector and the nature of the data, this breach raises significant concerns regarding cybersecurity protocols and the safeguarding of governmental digital assets.