About
Written by ThreatCluster from 3 storiesNova operates ransomware campaigns that combine data exfiltration with disruption of victim services, as evidenced by claims of exfiltrating sensitive data from KPMG Netherlands and by a ransomware attack that left ChipSoft’s website and services offline. Across 172 victims claimed, the group has targeted Technology, Manufacturing, Healthcare, Education, and Business Services sectors, with the United States, Brazil, France, Indonesia, and Spain among the most affected geographies. A recurring pattern across the reporting is attacks on large organizations with data exfiltration and operational disruption, illustrated by the January 2026 breach of KPMG Netherlands, which was indexed January 23, 2026 and involved exfiltration of data.
Sectors: Technology, Manufacturing, Healthcare · Countries: US, BR, FR
Recent victims
View all →| Victim | Sector | Country | Data | Posted | Status |
|---|---|---|---|---|---|
| SistNet | Not Found | IT | — | Jul 25, 2026 | listed |
| Center Of Information Technologies In Finance Public Institution | Financial Services | MD | — | Jul 25, 2026 | |
| Digital Edge | Technology | US | — | Jul 24, 2026 | |
| VNSO | Technology | VN | — | Jul 22, 2026 | |
| Marpatech | Industrial | PE | Retail 70GB | Jul 22, 2026 | listed |
| Canal 9 Litoral | Technology | AR | — | Jul 22, 2026 | |
| La Financière d'Orion (finorion) | Financial Services | FR | 20GB | Jul 21, 2026 | listed |
| Tèrra Aventura | Hospitality | PT | 3.5GB | Jul 21, 2026 | listed |
| Koperasi Karyawan PT Aplikanusa Lintasarta | Cooperative / Credit Union | ID | — | Jul 21, 2026 | listed |
| Jrd logistics | Transportation | US | 14GB | Jul 20, 2026 | listed |
| Rumah Sakit Universitas Indonesia (RSUI) | Healthcare | ID | 16GB | Jul 20, 2026 | listed |
| Universidad Nacional de Mar del Plata | Education | AR | — | Jul 20, 2026 | listed |
| Koplarla | Retail & E-Commerce | ID | 64GB | Jul 20, 2026 | listed |
| meralmanisa | Manufacturing | TR | — | Jul 19, 2026 | |
| Dephub | Government & Defense | ID | — | Jul 19, 2026 | |
| Jota Joias Premium | Retail & E-Commerce | BR | — | Jul 19, 2026 | |
| FMZ Tecnologia em Sistemas | Technology | BR | — | Jul 18, 2026 | |
| Phi | Not Found | CA | — | Jul 17, 2026 | |
| Digipro | Technology | VN | 60GB | Jul 17, 2026 | listed |
| Integrated Marketing Services | Business Services | United States | 50GB | Jul 17, 2026 | listed |
| Hynet | Technology | GB | — | Jul 10, 2026 | |
| NSW Rural Fire Service | Public Sector | AU | — | Jun 26, 2026 | |
| NSW Government (RFS Department) | Public Sector | AU | — | Jun 26, 2026 | |
| vslmarine | Transportation/Logistics | IN | — | Jun 26, 2026 | |
| lpgroup | Not Found | — | Jun 24, 2026 |