Ransomware Group: APT73

VICTIM NAME: coel[.]com[.]mx

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the APT73 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with the company coel.com.mx indicates a data compromise involving a significant amount of information categorized under various fields. This incident occurred on February 3, 2025, as noted in the discovery date. The leak exposes data that includes identifiers such as IDs, names, emails, and other sensitive records. There is also a total of 61 users whose information has been affected by this breach. The company operates from Mexico (MX), which contextualizes the scope of potential regional impact stemming from this data leak.

The leak page lists the internal information available, alongside images displayed that reportedly include screenshots of relevant documents. The page features indications of potential external users and partners impacted by this leak—highlighting the urgency and gravity of the situation. Additionally, 15 URLs related to users have been compiled, suggesting a wide net of compromised data. The full ramifications of this breach are yet to be fully understood, but the presence of detailed identifiers could lead to various security concerns for those involved.