centrum.sk Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On April 27, 2026, the ransomware group apt73 listed centrum.sk on its leak site, claiming to have exfiltrated internal files during a ransomware attack. The number of individuals affected is not known, and no further details about the scale or method of the incident have been made public. The listing raises immediate questions for users of the Slovak online portal, which offers email and news services. When an organisation that handles personal communications appears on a ransomware group’s site, the practical concern is whether account credentials, messages or other user-linked records have been removed from the organisation’s systems.

Breaking down the breach

The only confirmed information is the date the listing appeared and the statement that internal files were taken. No figure for the volume of data, the number of records, or the date of the underlying intrusion has been released. It is not known whether any data was subsequently published or sold.

Inside apt73

Apt73 is a ransomware operator that uses encryption to disrupt systems and often removes copies of data before demanding payment. The group maintains a leak site where it lists organisations it claims to have targeted. Such listings are presented by the group itself and are not independently verified in every case. The group’s pattern of activity includes both encryption of victim networks and the selective publication of material obtained during intrusions.

centrum.sk and its sector

Centrum.sk operates as an online portal in Slovakia that supplies email accounts alongside news and related content. Services of this type routinely process user registration details, email correspondence and login credentials. A successful intrusion at such a provider can therefore touch both the organisation’s internal records and material belonging to its users.

The information in question

The listing refers only to “internal files exfiltrated in ransomware attack.” No inventory of specific file types or data categories has been published. Organisations that run email and news portals commonly store account information, message metadata and administrative documents, yet the exact contents removed from centrum.sk remain unconfirmed.

The real-world impact

Individuals whose accounts or personal details were among the files face the possibility that their information could be used for further attempts at account access or social-engineering attacks. For the organisation, the incident adds operational disruption and the need to investigate the scope of any data removal. Both outcomes depend on details that have not yet been disclosed.

If your data was in this claimed breach

Anyone who holds an account with centrum.sk should treat the listing as a prompt to review their own security settings. Concrete steps include:

• Changing the password for the affected account and any other service that re-uses the same credentials.
• Enabling multi-factor authentication where available.
• Monitoring email and other accounts for unexpected login attempts or password-reset notices.
• Running a free exposure scan of the email address against known breach data sets to check for prior appearances.

AICompiled with AI assistance from public sources and published under our editorial standards.