ome.tv Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People who have used ome.tv may now face uncertainty about whether internal company files linked to the service have been taken and could later surface online. When a video-chat platform is listed by a ransomware group, the practical stakes include possible exposure of operational records that might contain user-related details, even if the exact scope remains unconfirmed.

Public reporting on 30 January 2025 stated that ome.tv had been listed by the apt73 ransomware group, which claimed to have exfiltrated internal files. The number of people affected is unknown, and independent confirmation of the claim has not been provided in the available record.

What happened

According to the reported facts, ome.tv was listed by the apt73 ransomware group on or around 30 January 2025. The listing asserts that internal files were exfiltrated during a ransomware attack. No further public detail has been given on the precise timing of any intrusion, the technical method used, the volume of data taken, or whether systems were encrypted. The number of individuals potentially affected remains unknown. The available information consists solely of the group’s claim that internal files were removed; independent verification of that claim is not part of the public record summarised here.

The group behind it: apt73

apt73 is publicly identified as a ransomware group. Like other ransomware operators, such groups typically gain unauthorised access to networks, exfiltrate data, and then list the victim on a leak site while threatening to publish the material if a ransom is not paid. Their operations often combine data theft with encryption of systems, though the exact tactics used against any single organisation can vary and are not always disclosed. Prior public activity associated with similarly named ransomware actors has included claims against commercial and online-service targets, with listings serving as pressure tools. In this instance, the group claims to have taken internal files from ome.tv; that assertion should be treated as an unverified claim rather than established fact unless further confirmation emerges.

Who is ome.tv?

ome.tv operates a free video-chat service that connects strangers for live conversations. Platforms of this type typically collect or process account identifiers, chat logs, device or network information, and moderation or safety records in the course of providing the service. Because users interact in real time with people they do not know, the service holds data that can be sensitive from a privacy and safety standpoint. A breach involving such an organisation is consequential because any compromise of internal files could affect both the company’s operations and the individuals who have used the platform, even when the precise contents of those files remain unconfirmed.

What data was at risk

The reported facts state only that internal files were exfiltrated in a ransomware attack. No specific categories of personal data—such as names, email addresses, chat content, or payment details—are named as exposed. Organisations running video-chat services commonly hold user account information, session metadata, and internal operational documents. Because the exact contents of the files claimed to have been taken are not disclosed, it is not possible to state with certainty what information, if any, relating to individual users is involved. The public record simply records the claim of internal-file exfiltration.

The real-world impact

For people who have used ome.tv, the primary risk is that any personal or behavioural data present in the claimed internal files could later be published, sold, or used for further targeting such as phishing or social-engineering attempts. Even limited operational records can sometimes contain enough detail to identify users or reconstruct activity. For the organisation itself, the listing creates reputational pressure, potential regulatory scrutiny, and the operational cost of investigating and containing an incident whose full scope is not yet public. Because the number of affected individuals is unknown and the data types remain unconfirmed, the concrete impact on any single person cannot be quantified from the available facts; the risk is real but currently unmeasured.

Were you affected?

If you have an ome.tv account or have used the service, treat the listing as a reason for caution rather than confirmed personal exposure. Practical first steps include:

• Changing any password associated with the service and enabling multi-factor authentication where available.
• Watching for unexpected messages or friend requests that reference past chats or personal details.
• Reviewing account activity logs if the platform provides them.
• Being alert to phishing attempts that claim to relate to a data incident.

Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. Public detail on this incident remains limited; further verified information may clarify the situation over time.

AICompiled with AI assistance from public sources and published under our editorial standards.