Ransomware Group: APT73

VICTIM NAME: bri[.]co[.]id

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the APT73 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page concerning Bank Rakyat Indonesia (BRI), one of Indonesia’s largest commercial banks, was discovered on December 18, 2024. This incident has significant implications for the financial services sector, highlighting vulnerabilities associated with protecting customer data. The leak has reportedly exposed a substantial amount of sensitive information, including details related to a large user base of approximately 77,594 individuals. The attack appears to be associated with the group known as APT73, which is known for targeting organizations in the financial sector.

Further analysis of the leak indicates that BRI has a workforce of 275 employees, alongside 103 third-party entities that may have been affected by this data breach. This situation necessitates an immediate response from the bank to assess the extent of the exposure and implement measures to mitigate potential fallout. Notably, the presence of a screenshot on the leak page suggests that internal documents may have been compromised or showcased, though the exact contents have been sanitized. Additionally, the posting includes URLs which may provide avenues for unauthorized access to compromised data, warranting serious attention from cybersecurity professionals.