Skip to content
Leak-site post naming Aptara, captured by ThreatCluster

Aptara

everest

Ransomware leak-site victim intelligence · EN

Data size
681 GB
Files
305,325
Views
64,000
Posted
Jul 22, 2024
Countdown
The timer counts down
Country
IN
Industry
Publishing

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Everest states that AptaraCorp data totaling 681 GB across 305,325 files was taken. They claim the archive includes publishing production materials and workflows, with data types such as PDF, XML, AXML, XHTML, JSON, TeX/LaTeX, EPUB, image assets and Office-like documents. The leak post is published on the group’s site, and the victim is listed as AptaraCorp (domain aptaracorp.com).

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

The AptaraCorp archive contains more than 305,325 file records with 681 GB of data. The data is organized around publishing production, manuscript processing, PDF production, XML conversion, EPUB/eBook production, LaTeX/TeX workflows, OCR, image handling, validation, vendor delivery packages and publisher-specific production folders.

Data categories
publishing productionmanuscript processingPDF productionXML conversionEPUB/eBook productionLaTeX/TeX workflowsOCRimage handlingvalidationvendor delivery packagespublisher-specific production folders
Leak site tags
aptara corpaptara corporation
File types seen
aux × 1,446bbl × 989bib × 946cls × 399eps × 3,973jpg × 47,284log × 1,737pdf × 37,969png × 36,488sty × 459tex × 9,247tif × 5,485xml × 61,985axml × 552epub × 227jpeg × 714json × 2,327tiff × 13xhtml × 1,980

Ransom note

Published by the group on their leak site, reproduced verbatim.

The files will be published after the timer counts down. The company still has time to get in touch with us

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

archive_description
The AptaraCorp archive contains more than 305,325 file records with 681 GB of data.

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page11 KB
Logo of Keysight Technologies featuring a red waveform graphic and the company name in white text.
onion leak page128 KB
onion leak page11 KB
Logo featuring the text "mansfield" in a stylized font, with "FAMILY DENTISTRY" below it.
onion leak page1.4 KB
Logo featuring a stylized letter "P" in orange with a black play button icon integrated into the design.
onion leak page7.5 KB
onion leak page5.8 KB
Logo featuring the text "Al-Futtaim" in blue, with "automotive" in a smaller font below it, accompanied by a geometric symbol.
onion leak page5.6 KB
Logo featuring stylized figures in orange and blue, with the text "ALZONE" in blue below.
onion leak page7.0 KB
Logo of Emirates Flight Catering, featuring stylized text in gold and red.
onion leak page6.8 KB
Logo of Dharma Group featuring a stylized design with blue and green colors, accompanied by the text "DHARMA GROUP" below it.
onion leak page7.7 KB