fortify.pro Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 8 May 2024 the Canadian software firm fortify.pro appeared on a leak site operated by the ransomware group apt73. The group claims it carried out a ransomware attack and exfiltrated internal files. The number of people whose information may have been involved remains unknown, and public detail about the precise contents of those files is limited. For anyone who has worked with, contracted, or otherwise shared data with the company, the listing raises concrete questions about whether personal or business information has left the organisation’s control and what practical steps are now warranted.

Ransomware incidents of this kind matter because the data at issue can later surface in secondary markets or be used for further fraud, even when the original victim organisation recovers its systems. Until more is confirmed, the safest course is to treat the claim seriously and review personal exposure.

Inside the incident

Public reporting states that fortify.pro was listed by apt73 on 8 May 2024. According to the available summary, the group asserts that it conducted a ransomware attack and that internal files were exfiltrated. No figure has been given for the volume of data taken, the number of individuals affected, or the exact date the intrusion began. Technical details of the initial access method, the encryption tools used, or any ransom demand have not been disclosed in the material provided. The listing itself is therefore best understood as an unverified claim by the group rather than an independently confirmed forensic finding. Beyond the headline assertion of exfiltrated internal files, further specifics remain undisclosed.

The group behind it: apt73

apt73 is known in open-source reporting as a ransomware actor that follows the now-common double-extortion model: encrypting systems while also copying data and threatening to publish it if payment is not made. Groups operating in this space typically maintain dedicated leak sites where they post victim names, sample files, and countdown timers. Their public communications often emphasise the volume or sensitivity of stolen material in order to increase pressure. Prior activity attributed to similarly named or styled ransomware crews has included attacks on mid-sized technology and professional-services firms, though each campaign is independent. In the present case the group claims fortify.pro as a victim; that claim has not been corroborated by independent confirmation in the facts available here. Readers should therefore treat statements originating solely from the leak site as assertions rather than established fact.

Who is fortify.pro?

fortify.pro is a Canadian company that, according to the reported summary, has developed software for corporate clients since 2015. Organisations of this type typically design, maintain and support business applications, which means they routinely handle source code, configuration data, customer contracts, employee records and, in many cases, limited personal information belonging to end users of the software they produce. A breach at a software vendor can therefore affect not only the firm’s own staff but also the clients who rely on its products and any individuals whose data those clients have shared. Because software firms sit at the centre of supply chains, an incident can create secondary risk for organisations that integrate the vendor’s tools into their own environments. The precise operational impact on fortify.pro itself has not been detailed publicly.

What data was at risk

The only data category named in the available facts is “internal files” said to have been exfiltrated during the ransomware attack. No further breakdown—such as whether the files contained customer lists, source repositories, financial records, employee personal data or authentication credentials—has been provided. Exact contents therefore remain unconfirmed. Software companies of fortify.pro’s profile commonly store source code, build artefacts, client correspondence, billing information and internal human-resources material. Any of those categories could be present among the claimed files, yet none can be asserted as fact on the basis of the current record. Until a fuller inventory is released by the organisation or verified by independent investigators, the scope of exposure should be regarded as unknown.

What's at stake

For individuals whose information may have been among the internal files, the practical risks include targeted phishing that references genuine business relationships, attempts to reuse passwords or other credentials, and, if personal identifiers were present, longer-term identity-fraud concerns. For corporate clients of fortify.pro the stakes include possible leakage of proprietary project details, contractual terms or technical configurations that could assist further attacks. The organisation itself faces operational disruption, potential regulatory notification duties under Canadian privacy law, and reputational questions from customers who must decide whether to continue trusting the vendor’s security posture. None of these outcomes is automatic; they depend on what was actually taken and how it is later used. The absence of confirmed numbers simply means the scale of those risks cannot yet be quantified.

Were you affected?

If you have ever been an employee, contractor, client or end-user of fortify.pro software, treat the claim as a prompt to act rather than as proof of personal compromise. Begin by reviewing recent account activity for any unexpected logins or password-reset requests. Enable multi-factor authentication wherever it is available, and replace any passwords that may have been reused across services. Monitor financial and credit statements for unfamiliar activity. Because the number of people affected is unknown and the exact data types remain unconfirmed, a free exposure scan of your email address against known breach corpora can provide an additional, low-effort check on whether your address has already appeared in publicly circulated dumps. Keep records of any correspondence you receive that appears to reference the incident, and report suspected fraud to the appropriate authorities. Further official statements from fortify.pro, if issued, should be read carefully for concrete guidance on next steps.

AICompiled with AI assistance from public sources and published under our editorial standards.