apos
First seen April 29, 2024Active16 claimed victims
The claims below are reproduced as posted by apos on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Apos is a data-broker extortion group that surfaced in April 2024, focusing on data exfiltration and threatening to publish or sell stolen information rather than encrypting files, targeting technology, healthcare, manufacturing, telecom, and government sectors across multiple countries.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| ACMARK | June 24, 2025 | ransomware_live | — |
| Lawton Partners | June 12, 2025 | ransomware_live | — |
| infraestructures.cat | June 12, 2025 | ransomware_live | — |
| Ha******.us | June 12, 2025 | ransomware_live | — |
| wow pictures | June 12, 2025 | ransomware_live | — |
| RH | April 14, 2025 | ransomware_live | — |
| KIU System Solutions | March 17, 2025 | ransomware_live | — |
| InternetWay | March 4, 2025 | ransomware_live | — |
| Netcom-World | March 4, 2025 | ransomware_live | — |
| M-1 TOOLWORKS | February 20, 2025 | ransomware_live | — |
| Auxis | January 4, 2025 | ransomware_live | — |
| Drogarias Preço Bom | October 16, 2024 | ransomware_live | — |
| Bitz Softwares | April 29, 2024 | ransomware_live | — |
| Algen Healthcare | April 29, 2024 | ransomware_live | — |
| Sunlux Group | April 29, 2024 | ransomware_live | — |
| Drogaria Preco Bom | April 26, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).