Ransomware victim disclosure

ungererandcompany.com

Claimed by apt73 · listed 4 hours ago

Today

Age

since listed · data leaked

Status timeline

Listed
May 21, 2026
Data leaked

At a glance

Group: apt73
Status: Data leaked
Country: DE
Sector: Not Found
Listed on leak site: May 21, 2026

What the group claims

Ungerer & The Company is an American company founded in 1893 that develops and manufactures flavo...

The leak post

captured from the group's site

Deadline: 2026/05/22 19:00:00 UTC +0
Ungerer & The Company is an American company founded in 1893 that develops and manufactures flavors, fragrances, and ingredients for the food and perfume industries. Internal documents, financial reports, sensitive information. Total size: 1 GB.   
|  *Until the files will be available left*  |  *We always initially offer to buy data by origin company. But we are also ready to consider third-party offers.*  |  
| --- | --- |  
*If you see that a timer is running in your company's block, you have a chance to avoid a data leak. To do this, you need to write to us in the form and indicate your details. Our support team will contact you shortly and help you. 
**You must understand that there is no time to think, you must make a decision quickly, the timer has started.**
If you see a button at the bottom of your company's publication, this means that all data is publicly available.
If you are a customer or employee of a company that has been affected, please contact us and give us the information about yourself that you want removed. We will check what we have related to you and remove it from the leak. **The price depends on the company size and sen…

Sources

Victim siteungererandcompany.com
Leak posthttp://basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion/page_company.php?id=162

Source

Indexed 4 hours ago

This page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.

Disclosure context

About apt73

APT73 is a recently emerged ransomware group that began operations in April 2024, with financial motivation as their primary driver based on their targeting patterns across multiple high-value sectors. The group has demonstrated rapid growth in their operational tempo, accumulating 78 documented victims within their first months of activity. Their targeting methodology shows a preference for English-speaking markets and major economies, with the United Kingdom and United States representing their primary focus areas, followed by significant activity in India, Brazil, and France. The group exhibits a clear preference for high-value sectors including business services, technology, financial services, and healthcare organizations, suggesting a calculated approach to victim selection based on potential payment capability and operational impact. Given the group's recent emergence and limited public documentation from major threat intelligence sources, specific details regarding their initial access vectors, tooling, encryption methods, or organizational structure remain largely unconfirmed by authoritative sources such as CISA, FBI, or established security research firms. The group's current operational status appears active based on the timeline of their emergence, though comprehensive analysis of their capabilities and infrastructure requires additional intelligence gathering and documentation by security researchers. The group has been linked to 142 public disclosures across our corpus. First observed on a leak site on April 22, 2024; most recent post May 21, 2026. The operation is currently inactive.

Also tracked as: Eraleign.

Timeline of this disclosure

May 21, 2026ungererandcompany.com listed by apt73on the group's public leak site

Other recent disclosures by apt73

apt73 has been linked to 142 public victims on Darkfield. A sample of the most recent: