novoair-bd.com Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On April 27, 2026, the domain novoair-bd.com appeared on a listing associated with the apt73 ransomware group. The entry states that internal files were exfiltrated from Novoair, a private airline operating in Bangladesh. No figure has been released for the number of people whose information may be involved, and further technical details have not been made public. The incident therefore leaves passengers, employees, and business partners without confirmed information about the scope or sensitivity of any material that left the organisation’s systems.

Breaking down the breach

Public reporting on the event is confined to the group’s listing itself. The date of the listing is given as April 27, 2026. The only data category referenced is “internal files exfiltrated in ransomware attack.” No statement has been issued by Novoair confirming or disputing the claim, and no independent verification of the volume or content of the files has appeared.

Key elements remain undisclosed: the date the intrusion began, the method of initial access, whether encryption was deployed, and whether any data was subsequently published or offered for sale. The number of individuals potentially affected is listed as unknown.

Inside apt73

Apt73 is a ransomware operator that maintains a leak site where it lists organisations it claims to have targeted. Such groups commonly encrypt systems and threaten to release stolen material if a ransom demand is not met. Their public listings serve as a pressure tactic rather than a verified record of events.

In this instance the group claims to have obtained internal files from novoair-bd.com. No additional statements or samples specific to this victim have been released in the available record.

novoair-bd.com and its sector

Novoair is a privately owned airline headquartered in Bangladesh. Its website, novoair-bd.com, provides booking and operational information for domestic and regional flights. Airlines routinely process passenger names, contact details, travel itineraries, payment references, and internal operational documents.

Because the organisation handles both customer transactions and regulatory records, any confirmed exposure of its internal files would touch information that is ordinarily protected under aviation and data-protection expectations in the region.

What data was at risk

The listing refers only to internal files. No inventory of file names, categories, or record counts has been published. It is therefore not possible to state with certainty which data fields, if any, were removed.

Airlines of this type commonly store passenger manifests, booking histories, identity documents supplied at check-in, crew records, maintenance logs, and financial documentation. Until Novoair or an authoritative investigation publishes a confirmed list, the precise contents of the exfiltrated material remain unverified.

The real-world impact

Individuals whose details appear in any exposed files could face risks of targeted phishing, account takeover attempts, or misuse of travel-related information. The absence of a confirmed record count means the scale of these risks cannot yet be quantified.

For the airline, the incident introduces potential operational disruption, regulatory scrutiny, and costs associated with investigation and remediation. No public statement from the company has addressed these matters to date.

Were you affected?

If you have booked travel with Novoair or supplied personal information to the airline, monitor your email and financial accounts for unusual activity. Consider enabling multi-factor authentication on any associated services and reviewing recent statements for unauthorised transactions.

Readers may also run a free exposure scan of their email address against known breach data sets to check for prior appearances of their information in published incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.