compensatii.gov.md Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

compensatii.gov.md, the official online government platform of the Republic of Moldova, was listed by the apt73 ransomware group on 27 April 2026. The listing states that internal files were exfiltrated during a ransomware attack. The number of people affected remains unknown, and no further technical details or confirmation of the data’s contents have been made public.

What happened

The incident came to light through a listing on a site associated with apt73. The entry identifies compensatii.gov.md as the target and notes that internal files were taken. No information has been released about the date or method of intrusion, the volume of data involved, or whether any systems were encrypted. The Moldovan authorities have not issued a public statement on the matter.

The group behind it: apt73

apt73 is a ransomware operation that maintains a leak site where it lists organisations it claims to have compromised. Such groups typically gain initial access through phishing, stolen credentials or unpatched systems, then move laterally before exfiltrating data and deploying encryption. The listing of compensatii.gov.md constitutes the group’s claim; independent verification of the intrusion or the data taken has not been provided.

Who is compensatii.gov.md?

compensatii.gov.md operates as the central government platform in Moldova for handling compensation-related services. Like other public-sector portals, it processes citizen applications and maintains records that support administrative functions. A breach at such a site is consequential because government platforms often hold data tied to official entitlements and personal identifiers.

What was likely exposed

The only detail released is that internal files were allegedly exfiltrated. The precise categories of information contained in those files have not been disclosed. Organisations of this type routinely store application records, identity documents and correspondence, yet the exact contents of the material taken in this case remain unconfirmed.

What's at stake

Individuals whose information appears in the exfiltrated files could face risks of identity misuse or targeted fraud, depending on the nature of the records. For the organisation, the incident may prompt reviews of access controls and incident-response procedures. Until the scope of the data is clarified, the practical impact on any specific person cannot be assessed.

Were you affected?

Check official statements from the Moldovan government or compensatii.gov.md for any guidance on next steps. Running a free exposure scan of your email address against known breach data can indicate whether your information has appeared in previously published datasets, though it will not confirm involvement in this specific incident.

AICompiled with AI assistance from public sources and published under our editorial standards.