APT73 Claims Targeting of Turkey’s TKGM

Summary
A claim attributed to apt73 says Turkey’s TKGM was targeted by ransomware. The monitoring post cites the actor’s leak site and says the claim is unconfirmed.
Key points
- The post identifies Turkey’s land registry and cadastre agency, TKGM (tkgm[.]gov[.]tr), as the named target.
- The ransomware claim is attributed to apt73 and linked to a page on the actor’s leak site.
- The record was discovered and published on May 22, 2026, and is marked as monitored by ransomware.live.
- The post says it cannot confirm the claim; it provides no independently verified evidence of compromise or impact.
Article Details
- Victim
- TKGM (Tapu ve Kadastro Genel Müdürlüğü)
- Victim Domain
- tkgm.gov.tr
- Claim Date
- 2026-05-22
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Unknown; the source does not confirm whether data was exfiltrated.
- Ransom Demand
- Unknown; no ransom demand is reported.
- Leak Status
- Unknown; the source reports a ransomware claim but does not confirm that data was published.
