nova

Active

25 tracked victims · First seen Mar 22, 2025 · Last seen Jul 25, 2026

About

Written by ThreatCluster from 3 stories

Nova operates ransomware campaigns that combine data exfiltration with disruption of victim services, as evidenced by claims of exfiltrating sensitive data from KPMG Netherlands and by a ransomware attack that left ChipSoft’s website and services offline. Across 172 victims claimed, the group has targeted Technology, Manufacturing, Healthcare, Education, and Business Services sectors, with the United States, Brazil, France, Indonesia, and Spain among the most affected geographies. A recurring pattern across the reporting is attacks on large organizations with data exfiltration and operational disruption, illustrated by the January 2026 breach of KPMG Netherlands, which was indexed January 23, 2026 and involved exfiltration of data.

Sectors: Technology, Manufacturing, Healthcare · Countries: US, BR, FR

Recent victims

View all →
Victim Sector Country Data Posted Status
SistNet Not Found IT Jul 25, 2026 listed
Center Of Information Technologies In Finance Public Institution Financial Services MD Jul 25, 2026
Digital Edge Technology US Jul 24, 2026
VNSO Technology VN Jul 22, 2026
Marpatech Industrial PE Retail 70GB Jul 22, 2026 listed
Canal 9 Litoral Technology AR Jul 22, 2026
La Financière d'Orion (finorion) Financial Services FR 20GB Jul 21, 2026 listed
Tèrra Aventura Hospitality PT 3.5GB Jul 21, 2026 listed
Koperasi Karyawan PT Aplikanusa Lintasarta Cooperative / Credit Union ID Jul 21, 2026 listed
Jrd logistics Transportation US 14GB Jul 20, 2026 listed
Rumah Sakit Universitas Indonesia (RSUI) Healthcare ID 16GB Jul 20, 2026 listed
Universidad Nacional de Mar del Plata Education AR Jul 20, 2026 listed
Koplarla Retail & E-Commerce ID 64GB Jul 20, 2026 listed
meralmanisa Manufacturing TR Jul 19, 2026
Dephub Government & Defense ID Jul 19, 2026
Jota Joias Premium Retail & E-Commerce BR Jul 19, 2026
FMZ Tecnologia em Sistemas Technology BR Jul 18, 2026
Phi Not Found CA Jul 17, 2026
Digipro Technology VN 60GB Jul 17, 2026 listed
Integrated Marketing Services Business Services United States 50GB Jul 17, 2026 listed
Hynet Technology GB Jul 10, 2026
NSW Rural Fire Service Public Sector AU Jun 26, 2026
NSW Government (RFS Department) Public Sector AU Jun 26, 2026
vslmarine Transportation/Logistics IN Jun 26, 2026
lpgroup Not Found Jun 24, 2026

All ransomware groups · Dark web intelligence