CYBERSECURITYTRACKER
Incidents

EraLeign (APT73)

Review this actor's tracked leak-site claims, published reporting, and attributed threat evidence.

ransomware234 leak-site claims, all timeLatest observed leak-site post 2026-07-24

Portable threat brief

EraLeign (APT73)

Facts from stored data only; no AI-written text.

Opens the browser print dialog; choose Save as PDF.

Executive facts

Actor
EraLeign (APT73)
Kind
ransomware
Actor record created
2026-07-06
Latest observed
2026-07-24
Leak-site claims
234
Catalogued techniques
0

Scope

Tracked sectors
Financial Services, Government, Technology, Retail, Manufacturing
Claim records
2024-04-23 to 2026-07-24

Vulnerability events linked to this group

No dated vulnerability events are attached to this group's linked vulnerabilities.

Verified techniques

No verified ATT&CK mapping for this group.

Defensive actions

No defensive actions are attached to this profile.

Ransomware claim data is unverified: RansomLook (CC BY 4.0).

Most-claimed sectorsFinancial ServicesGovernmentTechnologyRetailManufacturing
Activity window in this site's data

This is only the dates observed by this site. It is not this actor's lifetime or evidence of dormancy outside these dates.

Claim records
First observed Latest observed
Verified ATT&CK phases represented

No verified ATT&CK mapping for this group

Origin and motivation

Origin and motivation not attributed.

No MITRE ATT&CK group mapping exists for this actor yet. Mappings here are strict: an actor links to a MITRE group only when the group's own name, aliases, or MITRE-published description match, and MITRE has not catalogued this group. Technique and defensive action data will appear automatically if a verified mapping lands.

Claims posted under this group's name or leak-site brand
234 on this site
View all on Breaches →
Leak-site claim activity

Claims per month, 2024-04 to 2026-07. Peak 38 in 2025-01.

2024-042026-07
Show monthly counts as a table
MonthClaims
2024-042
2024-054
2024-066
2024-070
2024-083
2024-090
2024-1020
2024-1117
2024-1220
2025-0138
2025-028
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-014
2026-026
2026-0334
2026-0430
2026-0514
2026-0612
2026-0716

0 additional claims without a disclosure date

Ransomware claim data is unverified: RansomLook (CC BY 4.0).

Glossary