aliorbank.pl Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
aliorbank.pl was listed by the apt73 ransomware group on April 27, 2026, after internal files were exfiltrated in a ransomware attack. An undisclosed number of people may have been affected; check the bank’s notices and monitor your accounts for any unusual activity.
What happened
The listing appeared on the date noted above. The group described the material as internal files allegedly taken from aliorbank.pl, a Polish bank, and specified that the exfiltration occurred in the course of a ransomware operation. The only volume figure provided is 0.06 GB. No further details on the intrusion method, the duration of access, or any ransom demand have been made public. The number of people whose information may be involved remains unknown.
Who is apt73?
apt73 is a ransomware operator that maintains a leak site where it lists organisations from which it claims to have stolen data. Such groups commonly encrypt systems and remove copies of files, then threaten to release the material if payment is not received. The listing of aliorbank.pl constitutes the group’s claim; independent confirmation of the data’s authenticity or scope has not been reported.
About aliorbank.pl
aliorbank.pl operates as a bank in Poland and therefore processes customer accounts, transactions, and related records. Financial institutions of this type routinely hold personal identifiers, account details, and internal operational documents. A claim of access to such an organisation draws attention because banks are frequent targets in campaigns that seek both financial records and leverage for extortion.
What data was at risk
The only categories named in the listing are financial documents and internal documents. The precise contents of the 0.06 GB archive have not been disclosed. Organisations in this sector commonly store customer names, account numbers, transaction histories, and employee records, yet it is not confirmed whether any of these specific items appear in the exfiltrated material.
The real-world impact
Exposure of internal bank files can create regulatory reporting obligations and may require affected customers to monitor accounts for unusual activity. For the organisation, the incident adds to the costs of investigation, potential remediation, and any required notifications. Because the volume is small and the exact data types remain unverified, the scale of personal harm cannot yet be quantified.
Were you affected?
Individuals can review account statements for anomalies and consider placing fraud alerts with their bank or credit agencies. Checking whether an email address appears in known breach data sets provides one practical starting point; several free online services allow users to run such a scan without submitting additional personal information.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
tvnmedia.com Listed by apt73 Ransomware Grouphl.co.uk Listed by apt73 Ransomware Groupalgosaibi-gtb.com Listed by apt73 Ransomware Groupcredio.eu Listed by apt73 Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the aliorbank.pl Listed by apt73 Ransomware Group →
Publicly posted by apt73 — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.