autogedal.ro Listed by APT73 Ransomware Group

On February 7, 2025, Romanian travel company AutoGedal appeared on the leak site of the ransomware group known as apt73. The listing states that internal files were exfiltrated during a ransomware attack on the firm, which provides travel, nature, and adventure packages to customers across Europe.

What Public Reporting Shows

Public reporting indicates that AutoGedal was listed on the apt73 leak portal on February 7, 2025. The data consists of internal company files taken after the group deployed ransomware. The exact number of people whose personal information is contained in those files remains unknown. Available reporting describes the breach as involving documents that could include customer bookings, contact details, and other records handled by the travel agency. No ransom payment status or exact volume of data has been publicly confirmed by the company or the attackers.

Why This Matters for You and Your Family

When a travel company loses control of internal files, the information you provided to book a trip — names, addresses, phone numbers, email accounts, passport copies, or payment details — can end up in the hands of criminals. For ordinary families this means a higher risk of identity theft, unexpected charges, or targeted scams that reference your recent holiday or adventure booking. Children’s details are sometimes included in family bookings, which can create long-term exposure if those records are sold or published. The breach is another reminder that your data travels far beyond your own devices and accounts.

The Doxxing and Identity-Chain Risks

Stolen internal files often contain more than one piece of information about a person. An email address listed next to a phone number and home address can be combined with data from other breaches to build a complete profile. Criminals then use these chains to dox individuals, hijack online accounts, or impersonate family members. Credential leaks like this one frequently cascade into gaming account takeovers, especially for children whose parent-created accounts reuse the same email or password. Once an attacker controls a gaming profile tied to a real name and address, further harassment or extortion becomes straightforward.

Apt73’s Publicly Known Track Record

Public reporting attributes the group’s emergence to 2024. Notable prior victims listed on their leak sites have included various small and mid-sized organizations across Europe and Latin America. Their typical playbook begins with initial access through phishing or exploited remote desktop services, followed by claimed exfiltration of internal documents before encryption. The group then demands payment and publishes samples or full datasets on their onion site if the victim does not meet the deadline. Exact tactics can vary, but the pattern of listing companies shortly after exfiltration has remained consistent in available reporting.

What to do

• Run a DoxxScan to map every link between your email addresses, phone numbers, travel booking handles, and real-world identity so you can see exactly what chains exist today.
• Rotate any password you used on the AutoGedal site or related travel portals anywhere it has been reused, and switch on two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same family address or parent email.
• Let remediation specialists handle takedown requests for any exposed personal records found on data broker sites or underground forums.

The incident shows that even a single travel booking can feed a larger identity chain that criminals exploit for months or years. Taking concrete steps now limits how far that chain can grow. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial and close the gaps before the next leak appears.