nova
ransomware group · aka Nova, Nova ransomware group · unknown (no widely reported public reporting establishes the operators' country or attribution) · active since 2026-06-14 (first listed victim tracked by this dashboard; any earlier unreported activity is unknown)
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
38
All-time (tracked)
181since 2025-04-28
Last post
07-25 11:52UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Nova is a data-extortion group tracked by this dashboard through the victim listings on its public leak site, with 44 claimed victims posted since 2026-06-14. The posting tempo was high, averaging roughly one new victim listing per day through the listing dated 2026-07-25, after which the dashboard recorded no new posts for at least 30 days. No widely reported vendor research, law-enforcement statements, or blockchain-analytics reports on Nova's tooling, infrastructure, or revenue were identified for this profile, so most operational details are unknown. The breadth of listed victims across multiple countries and sectors is consistent with a double-extortion model and possibly an affiliate-based operation, though this is inferred from listing behavior rather than confirmed public reporting.
Tactics & tooling
- Maintains a public leak site listing claimed victims to apply extortion pressure (per this dashboard's tracking)
- High-volume posting cadence: 44 victim listings in roughly six weeks (per this dashboard's tracking)
- Claims victims across multiple countries and sectors, including IT service providers, financial institutions, and broadcasters, based on listed victim identities
- No widely reported public details on initial access methods, encryption tooling, or malware families as of this profile
Targeted sectors
IT services and managed IT (e.g., SistNet, VNSO)Telecommunications and IT infrastructure (e.g., Lintasarta, Digital Edge)Financial institutions and financial services (e.g., Center of Information Technologies in Finance, La Financiere d'Orion)Media and broadcast (e.g., Canal 9 Litoral)Logistics (e.g., JRD Logistics)Retail and consumer goods (e.g., Jota Joias Premium, Koplarla)
Notable public victims
Digital Edge (data-center/infrastructure provider; listed on group's leak site per dashboard tracking), Lintasarta / Koperasi Karyawan PT Aplikanusa Lintasarta (Indonesian ICT and telecommunications provider; listed per dashboard tracking), Center Of Information Technologies In Finance Public Institution (public-sector financial IT institution; listed per dashboard tracking), VNSO (IT services; listed per dashboard tracking), Canal 9 Litoral (broadcast media; listed per dashboard tracking), La Financiere d'Orion (financial services; listed per dashboard tracking)
Estimated earnings
No public figure.
Leak-site victims181 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| LCM Construção e Comércio S/A | · Jul 11, 2025 | LCM Construção focuses on providing high-quality engineering construction solutions with technical excellence and competitive costs. The company prioritizes sustainability and aims to meet the expectations of target clients, stakeholders, and employees... |
| Computer Ingenuity Associates | · Jul 10, 2025 | CIA Solutions are hotel consultants who specialize in software designed to help owners and operators manage profit, labor, budgets, and forecasts effectively. Their innovative solutions... |
| Eurofins | · Jul 6, 2025 | Eurofins Scientific is a global network of life sciences companies that offers a comprehensive range of analytical testing services to clients across various industries. The organization is recognized as a world leader in areas such as food, environmental, pharmaceutical, and cosmetic product testing... |
| Rama judicial colombia | · Jul 3, 2025 | The University of Zagreb Faculty of Science (Croatian: Prirodoslovno-matematički fakultet, PMF) is a prominent faculty within the University of Zagreb, Croatia, dedicated to education... |
| The University of Zagreb Faculty of Science | · Jul 2, 2025 | The University of Zagreb Faculty of Science (Croatian: Prirodoslovno-matematički fakultet, PMF) is a prominent faculty within the University of Zagreb, Croatia, dedicated to education... |
| Portel Logistic Technologies | · Jul 1, 2025 | Portel Logistic Technologies software solutions support financial, operational and logistics processes... |
| Epcatalogs Company | · Jun 29, 2025 | EPCATALOGS specializes in providing electronic spare part catalogs, workshop manuals, and diagnostic software for the automotive and heavy machinery industries... |
| Feng Chia University | · Jun 18, 2025 | Feng Chia University (FCU), located in Taichung, Taiwan, is a prominent private... |
| varico Poland | · Jun 16, 2025 | varico.pl is the official website of Varico, a Polish company specializing in financial and accounting ... |
| SunMoon university | · May 28, 2025 | The website sunmoon.ac.kr is the official online portal of Sun Moon University (SMU), a private, non-profit institution located in Asan... |
| educo | · May 27, 2025 | Educo El Salvador, the Salvadoran branch of Educo, an international non-governmental organization (NGO) dedicated to... |
| VS One Technology | · May 27, 2025 | VS One is a technology solutions provider based in Sri Lanka, established in 2019. The company specializes in distributing... |
| Municipality of Pisa | · May 10, 2025 | The website comune.pisa.it is the official portal of the Municipality of Pisa, Italy. It serves as the primary online resource for residents, busine... |
| novaevo+ / T.consulT | · May 8, 2025 | "Novaevo" refers to a specialized software solution developed by T.consulT, an Italian company, designed to manage the lifecycle of technical documentation in industrial sectors, particularly aerospace and defense. The software ensures... |
| agromate company | · May 1, 2025 | Data has been leaked shame on you and all who work with you |
| HELUKABEL company | · May 1, 2025 | Data has been leaked shame on you and all who work with you |
| SJERP company | · May 1, 2025 | The website sj.com.do is the official platform for SJ ERP, a comprehensive Enterprise Resource Planning (ERP) software developed by JoS... |
| diallog Company | · Apr 28, 2025 | Diallog Telecommunications is a Canadian-owned and operated telecom company based in Toronto, established in 1998. Originally founded as Eurotel, the company has evolved into a full-service provider offering both residential and business telecommunications solutions across Canada |
| rawafid company | · Apr 28, 2025 | Established in 2008 and headquartered in Riyadh, Rawafid Industrial specializes in water infrastructure projects, including seawater and brackish water desalination, wastewater treatment, and water reuse. The company offers services such as design and engineering, turnkey EPC (Engineering, Procurement, and Construction) solutions, operation and maintenance, construction management, and value engineering. Notably, Rawafid Industrial has been involved in significant projects like the Jubail 4 and 6 Independent Water Plant and the Ras Mohaisen–Baha–Makkah Water Transmission System |
| agromate company | · Apr 28, 2025 | Agromate.com.my is the official website of Agromate Holdings Sdn Bhd, a leading Malaysian agricultural company specializing in fertilizer production, distribution, and sustainable agricultural solutions |
| bettininformatica - suporteon company | · Apr 28, 2025 | The website bettininformatica.com.br belongs to Bettin Soluções em Informática, a technology company based in Marília, São Paulo, Brazil. They offer services such as computer maintenance, internet systems development, and network security |
| Bio-Clima Service | · Apr 28, 2025 | Data has been leaked shame on you and all who work with you |
| ARRCO LSM | · Apr 28, 2025 | Data has been leaked shame on you and all who work with you |
| NewHotel cloud company | · Apr 28, 2025 | Data has been leaked shame on you and all who work with you |
| Al-Hejailan Group | · Apr 28, 2025 | Data has been leaked shame on you and all who work with you |
| hasbco Company | · Apr 28, 2025 | Data has been leaked shame on you and all who work with you |
| Formosa Chang | · Apr 28, 2025 | Data has been leaked shame on you and all who work with you |
| Pere Claver grup | · Apr 28, 2025 | Data has been leaked shame on you and all who work with you |
| Ihara company | · Apr 28, 2025 | Data has been leaked shame on you and all who work with you |
| Tomio Ingeniería | · Apr 28, 2025 | Data has been leaked shame on you and all who work with you |
| Élan Sportif Nantes | · Apr 28, 2025 | this Victim has been unlisted and operation leak has been stoped , we stop attacks on schools non-profit companys from 1 April , please contact our department to receive decryptor ... |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .