liftkits4less.com Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On November 8, 2024, liftkits4less.com was listed by the ransomware group apt73. Public reporting describes the incident as a ransomware attack in which internal files were allegedly exfiltrated. The number of people affected is unknown, and many operational details remain undisclosed.

The listing matters because the company is identified as a major online retailer of vehicle suspension lift kits, a business that routinely handles customer contact and order information. Any confirmed exposure of such material can create lasting privacy and fraud risks for individuals who have interacted with the site.

Breaking down the breach

Available information states that liftkits4less.com appeared on an apt73 listing dated November 8, 2024. The group claims the attack involved ransomware and the exfiltration of internal files. No public confirmation has been provided regarding the precise date of intrusion, the attack vector, the volume of data removed, whether systems were encrypted, or any ransom demand. The number of individuals potentially affected is listed as unknown.

The reported summary associated with the listing asserts that client data was among the materials involved and names fields including ID, name, email, group, phone, ZIP, country, and state/province. These assertions originate from the threat actor’s claim and have not been independently verified in the public record. Beyond the description of “internal files exfiltrated in a ransomware attack,” further technical or forensic detail has not been released.

Who is apt73?

apt73 is a ransomware group that has been observed conducting double-extortion operations: encrypting victim systems while also stealing data and threatening public release if a ransom is not paid. Like many such actors, the group maintains a leak site where it posts the names of organizations it claims to have compromised, often accompanied by sample files or data descriptions intended to increase pressure. Public reporting has linked apt73 to multiple campaigns across different sectors, though the group’s exact composition, infrastructure, and internal naming conventions can shift over time.

In the present case, the appearance of liftkits4less.com on the group’s listing constitutes an unverified claim by apt73. No independent confirmation of the full scope or success of the attack has been included in the available facts, and statements about what was taken should be read as assertions made by the threat actor rather than established findings.

About liftkits4less.com

liftkits4less.com is described in the reported summary as the largest online seller of suspension lift kit systems. Businesses of this type operate in the automotive aftermarket sector, selling specialized vehicle-modification components directly to consumers and installers. Typical operations require collection and storage of customer identifiers, shipping addresses, contact details, order histories, and related account information to process sales, manage inventory, and provide support.

A ransomware incident at an e-commerce retailer of this scale can interrupt order fulfillment, customer service, and internal systems. Because the company deals primarily with end customers rather than solely business-to-business partners, any exposure of client records carries direct consequences for private individuals who have purchased or inquired about products.

The information in question

The facts state that internal files were exfiltrated in a ransomware attack. The accompanying summary specifically names client data fields: ID, name, email, group, phone, ZIP, country, and state/province. No further inventory of file types, databases, or total volume has been disclosed, and the exact contents of the exfiltrated material remain unconfirmed beyond these claims.

Organizations selling automotive parts online commonly maintain customer account records, shipping and billing addresses, phone numbers, email addresses, and order details. Payment-card data, if stored, is often subject to stricter controls, but the facts do not indicate whether any payment information was involved. Because the precise data set has not been independently verified, it is not possible to state with certainty which records, if any, left the company’s control.

The real-world impact

If the claimed client data fields were exposed, affected individuals could face elevated risks of targeted phishing, social-engineering attempts, or account-takeover efforts that use the leaked contact and location details as authenticity cues. Phone numbers and email addresses can also be used for spam or scam campaigns that reference a recent purchase or inquiry. Identity-related fraud remains a longer-term concern whenever names are paired with geographic and contact information, even if full government identifiers are absent.

For the organization itself, a ransomware event can produce operational downtime, recovery expenses, and erosion of customer confidence. No public figures for financial loss, system downtime, or number of records involved have been released, so the concrete scale of impact cannot yet be measured. The unknown number of people affected further limits any assessment of overall personal harm.

What to do if you're exposed

Anyone who has created an account, placed an order, or otherwise shared contact details with liftkits4less.com should treat the possibility of exposure seriously until more definitive information appears. Monitor financial and email accounts for unexpected activity, and treat unsolicited messages that reference the company or personal details with caution. Change passwords on any related accounts and enable multi-factor authentication where it is offered. Readers can also run a free exposure scan of their email address to check whether their information has already surfaced in known breach data sets.

AICompiled with AI assistance from public sources and published under our editorial standards.