www.polleninformation.at Listed by apt73 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People who have used or registered with www.polleninformation.at face practical questions about whether their personal details and login credentials may now be in unauthorized hands. On 27 November 2024 the site was listed by the apt73 ransomware group, which claims to have taken internal files containing personal information and passwords. The exact number of individuals affected remains unknown, leaving those who rely on the service without clear confirmation of their status.

Public information about the incident is limited to the group's listing and a brief summary. That scarcity of detail makes it important to examine what has been reported, what is known about the actor involved, and what steps people can reasonably take while fuller confirmation is still unavailable.

Breaking down the breach

Reports dated 27 November 2024 state that www.polleninformation.at was listed by the apt73 ransomware group. The group claims that internal files were exfiltrated during a ransomware attack. No further technical details about the intrusion method, the duration of access, or the precise timeline of the incident have been disclosed publicly. The number of people affected is listed as unknown. A reported summary characterises the target as a pollen-situation informational site and notes “Personal info + Pass. 22140 lines.” Beyond that claim, no independent verification of the volume or completeness of the data has been published.

The group behind it: apt73

apt73 is a ransomware operation that follows the double-extortion model common among contemporary groups: systems are encrypted and data is also copied so that the threat of public release can be used as additional leverage. Groups of this type typically maintain leak sites where they post victim names and sample data to pressure organisations into paying. Their listings are claims made by the actors themselves and are not independently verified at the moment of publication. Public reporting on apt73 has documented similar listings of other organisations across various sectors, usually accompanied by assertions that internal documents or databases were taken. No specific statements by apt73 about the content or authenticity of the www.polleninformation.at files, beyond the listing itself, are part of the available record for this incident.

About www.polleninformation.at

www.polleninformation.at is an informational website that provides pollen-situation updates, a service typically used by people managing allergies or respiratory conditions. Organisations of this kind commonly maintain internal operational files, user-registration databases if personalised alerts or accounts are offered, and administrative credentials. Because the site deals with health-related environmental data, any associated personal records can include contact details, location preferences, or login information that users would not expect to see outside the organisation. A breach of such a service is consequential precisely because the data, even if limited in volume, can be sensitive and because many users treat the site as a trusted public resource rather than a commercial platform.

What was likely exposed

The facts name “internal files exfiltrated in ransomware attack” and the reported summary adds “Personal info + Pass. 22140 lines.” These descriptions indicate that personal information and passwords formed part of the claimed material. Exact data types beyond that phrasing, the structure of the files, or whether the 22 140 lines represent unique individuals or records of another kind have not been independently confirmed. Organisations that run pollen-information services typically hold user-account credentials, email addresses, and possibly preference or location data used for forecasts; however, the precise contents of the files listed by apt73 remain unconfirmed.

What's at stake

If personal information and passwords were among the files taken, affected individuals face the ordinary risks that accompany credential exposure: unauthorised access to other accounts where the same password was reused, phishing attempts that exploit knowledge of the breach, and potential misuse of any contact or location details present. For the organisation the stakes include operational disruption from the ransomware event itself, loss of user trust, and the need to notify and support people whose data may have been involved. Because the number of people affected is unknown and the full scope of the files is unconfirmed, the practical impact cannot yet be quantified with precision.

If your data was in this claimed breach

Anyone who has created an account or supplied personal details to www.polleninformation.at should treat the possibility of exposure as real until clearer information emerges. Change any password used on the site and ensure that password is not reused elsewhere. Enable multi-factor authentication on other important accounts where it is available. Monitor email and financial accounts for unexpected activity. Readers can also run a free exposure scan of their email address to check whether their information has already appeared in known breach data sets. Official notifications from the organisation, if they are issued, should be followed carefully; until then, these basic steps reduce the most immediate risks associated with the claimed exfiltration.

AICompiled with AI assistance from public sources and published under our editorial standards.