www.botiga.com.uy Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target e-commerce platforms as a reliable source of pressure, combining data theft with encryption threats to force negotiations. In this landscape, even mid-sized online retailers can appear on leak sites within days of an intrusion, leaving customers and staff uncertain about what was taken.

On 8 November 2024 the domain www.botiga.com.uy was listed by the ransomware group apt73, which claims to have exfiltrated internal files. The number of people affected remains unknown, and public detail beyond the listing itself is limited. The claim matters because the site is a consumer-facing store that routinely handles personal and transactional data.

Inside the incident

Public reporting states that www.botiga.com.uy was listed by apt73 on 8 November 2024. The group asserts that internal files were exfiltrated during a ransomware attack. No further technical details—such as the initial access vector, the exact date of intrusion, the volume of data removed, or whether systems were encrypted—have been disclosed. The number of individuals whose information may have been involved is listed as unknown. The only concrete assertion available is the group’s own leak-site claim that internal files were taken.

Who is apt73?

apt73 is a ransomware operation that follows the now-common double-extortion model: data is copied out of the victim’s network before encryption, and the threat of public release is used to increase pressure. Like other groups of this type, it maintains a dedicated leak site where it posts victim names and, at times, sample files. Publicly documented activity associated with apt73 and similar actors typically involves opportunistic targeting of organisations with internet-facing systems, followed by lateral movement and bulk file collection. No independent confirmation of the group’s claims regarding www.botiga.com.uy has been released; the listing itself remains an unverified assertion by the actors.

Who is www.botiga.com.uy?

www.botiga.com.uy is an online retail store based in Uruguay that markets itself as a one-stop shop for household and family needs, offering more than 10,000 products. E-commerce sites of this kind routinely process customer accounts, order histories, shipping addresses, payment-related records and internal business documents. A breach at such an organisation is consequential because the data it holds can link real identities to purchasing behaviour and contact details, creating lasting privacy and fraud risks for customers and employees alike.

The information in question

The only data category named in connection with the incident is “internal files exfiltrated in a ransomware attack.” Exact file types, databases or personal-data fields have not been disclosed. Organisations operating online stores typically hold customer names, email addresses, physical addresses, phone numbers, order records and, in some cases, partial payment information, together with employee records and operational documents. Because the precise contents of the claimed exfiltration remain unconfirmed, it is not possible to state which of these categories, if any, were included.

What's at stake

For individuals, the principal risks are identity-related fraud, targeted phishing that references real purchases, and long-term exposure of contact or address data. For the organisation, the stakes include potential regulatory scrutiny under data-protection rules, loss of customer trust, and the operational cost of investigation and remediation. Because the scale of the claimed theft is unknown, the full extent of these risks cannot yet be quantified. Even limited internal files can contain enough personal detail to enable follow-on social-engineering attacks.

Were you affected?

If you have an account or have placed orders with www.botiga.com.uy, treat the listing as a prompt to take basic protective steps. Public confirmation of individual impact is not available, so caution is warranted until more detail emerges.

• Change the password on your botiga.com.uy account and any other site where you reused that password.
• Enable multi-factor authentication wherever it is offered.
• Monitor bank and card statements for unfamiliar charges.
• Be alert for phishing messages that mention recent orders or request personal details.
• Run a free exposure scan of your email address to check whether it has already appeared in known breach data sets.

These measures reduce the practical harm that can follow from any unauthorised release of internal files, regardless of whether your specific records were among those claimed by the group.

AICompiled with AI assistance from public sources and published under our editorial standards.