moccae.gov.ae Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On April 27, 2026, the domain moccae.gov.ae appeared on a listing associated with the apt73 ransomware group. The entry states that internal files were exfiltrated during a ransomware attack on the Ministry of Climate Change and Environment. No further details on the number of individuals affected or the precise volume of data have been released. Such listings have become a recurring feature of ransomware activity directed at government bodies, where operators seek leverage through both operational disruption and the threat of disclosure.

Inside the incident

The only confirmed information is the reported date of April 27, 2026, and the description that internal files were removed from moccae.gov.ae systems. The number of people affected remains unknown. No technical details on initial access, dwell time, or encryption have been made public.

The apt73 group claims responsibility through its leak-site listing. No independent confirmation of the data volume or the authenticity of the files has been provided by the ministry or other authorities.

The group behind it: apt73

apt73 is a ransomware operation that maintains a public listing of claimed victims. These groups typically combine file encryption on targeted networks with the removal of data for later publication if ransom demands are not met. Their listings serve as both a pressure tactic and a signal to other potential targets.

Prior activity attributed to similar actors shows a pattern of focusing on organizations that hold sensitive operational or regulatory records. Attribution in any single case rests on the group’s own statements unless corroborated by investigators.

Who is moccae.gov.ae?

moccae.gov.ae is the online presence of the Ministry of Climate Change and Environment, a federal government body in the United Arab Emirates. The ministry handles policy, permitting, and data collection related to environmental regulation, climate programs, and natural-resource management.

Government ministries of this type routinely process records on licensed activities, compliance inspections, research partnerships, and communications with other agencies. A breach therefore touches both institutional operations and any personal or commercial information submitted to fulfill regulatory requirements.

What was likely exposed

The listing states that internal files were exfiltrated. No inventory of file types, formats, or specific data categories has been released.

Organizations in this sector commonly store environmental monitoring data, permit applications, inspection reports, and correspondence that may contain names, organizational identifiers, or technical details. The exact contents of the exfiltrated material remain unconfirmed.

The real-world impact

Individuals or entities named in ministry records could face secondary risks if the files contain contact details, project information, or compliance histories. The primary concern is the potential for targeted follow-on activity such as phishing or social-engineering attempts.

For the ministry, the incident adds operational strain through investigation, remediation, and any required notifications. Public-sector breaches also affect trust in the handling of regulatory data even when the scale of exposure is still unclear.

Were you affected?

Begin by monitoring official statements from the Ministry of Climate Change and Environment for any guidance on notifications or support. If you have submitted documents or maintained correspondence with the ministry, treat unsolicited messages that reference those interactions with caution.

Readers can run a free exposure scan of their email address against known breach data to check for prior appearances of their information in publicly discussed incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.