Ransomware Group: APT73

VICTIM NAME: tni[.]mil[.]id

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the APT73 Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The recent ransomware incident affecting the Indonesian Army, identified by the website tni.mil.id, has resulted in a significant data breach. The published date of the leak corresponds with the discovery of the incident on February 25, 2025. This breach, attributed to the group named apt73, compromises a vast database consisting of sensitive information, potentially including personnel details such as names, ranks, corps, grades, and assignments. The leak appears to target critical infrastructure and national security by exposing sensitive military data.

The available information indicates that the breach includes documentation on 31 employees, as well as data related to 152 associated users and 9 third-party entities. The dataset potentially includes URLs to these third parties, raising further concerns regarding data privacy and security. The leak page also features a screenshot depicting this sensitive information, emphasizing the seriousness of the situation. In addition, the public sector’s exposure reflects a growing trend in cyberattacks targeting government and military entities, making this breach particularly alarming.