Ransomware victim disclosure
← All victimsCofaco Industries S.A.C.
listed as cofaco.com · Claimed by apt73 · listed 23 days ago
Status timeline
- Listed
Apr 27, 2026
- Data leaked
At a glance
About the victim
AI dossier — public-source company profileCofaco Industries S.A.C. is a fully vertically integrated textile and apparel manufacturer based in Peru, controlling all production stages from fiber spinning and yarn dyeing through knitting, fabric dyeing, cut-and-sew, and embroidery to finished garments. The company develops, manufactures, and distributes innovative and sustainable garments for brands worldwide. It operates under an Integrated Management System and is pursuing OEA (Authorized Economic Operator) certification from SUNAT.
- Industry
- Vertically Integrated Textile & Apparel Manufacturing
- Address
- Peru (exact street address not publicly stated)
Attack summary
Severity: high — Data has been confirmed published ('data_published' status) by the threat actor, indicating successful exfiltration of company data. The company's public site references personal data protection policies and employee financial records (profit-sharing payments), suggesting PII and business-sensitive data are likely among the exposed material. The absence of a stated ransom and published data elevates severity beyond medium.The APT73 ransomware group claims to have compromised Cofaco Industries S.A.C. and has published data as indicated by the 'data_published' disclosure status, asserting the company is a textile producer in Peru that produces fabrics and tailoring. No specific ransom amount or data volume was stated in the post.
Data the group says was taken
AI dossier — extracted from the leak post- Company business data
- Employee records (profit-sharing payment data referenced on public site)
- Trade logistics chain documentation
- Personal data (per published Personal Data Protection Policy)
- Chemical product management records
- Internal financial/payroll information
What the group claims
Cofaco Industries S.A.C. is a textile company in Peru, which produces fabrics and tailoring (a fu...
Sources
Source
Indexed 23 days agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
