Nova Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
15
occurrences
First Seen
January 26, 2026
Last Seen
May 21, 2026

Nova is a ransomware_group tracked across 6 threat clusters and 15 intelligence report mentions on ThreatCluster. First observed January 26, 2026; most recent activity May 21, 2026.

Related Threat Clusters

  • Ransomware Attack Disrupts Dutch Healthcare Software Provider ChipSoft

    On April 7, 2026, ChipSoft, a leading Dutch healthcare software vendor, suffered a ransomware attack that rendered its website and services offline. The company manages patient records for approximately 80% of hospitals…

    17 articles · Updated April 8, 2026
  • MioLab MacOS Stealer Targets Users with Advanced Theft Techniques

    MioLab, a sophisticated MacOS infostealer, has emerged as a significant threat in the cybercrime landscape, particularly targeting both consumer and enterprise users of Apple's macOS. Marketed on Russian-language forums…

    3 articles · Updated March 23, 2026
  • Rise of Drainer-as-a-Service: A New Threat to Cryptocurrency Holders

    Cryptocurrency theft operations have evolved into structured underground services known as Drainer-as-a-Service (DaaS). These services rely on social engineering tactics to lure victims to fake crypto-related websites,…

    2 articles · Updated May 21, 2026
  • Cervical Cancer Lab Data Breach: Inadequate Security Exposed 850,000 Records

    In July 2025, Clinical Diagnostics, responsible for cervical cancer screening tests, was hacked, leading to the theft of sensitive data from 850,000 individuals. The Inspection Health Care and Youth (IGJ) found that the…

    2 articles · Updated May 13, 2026
  • FBI Seizes RAMP Cybercrime Forum Used by Ransomware Gangs

    The FBI has seized the RAMP cybercrime forum, a key platform for ransomware operations and other digital crimes. Both the forum's dark web and clearnet domains now display a seizure notice attributed to the FBI,…

    16 articles · Updated January 28, 2026
  • Nova Ransomware Claims Breach of KPMG Netherlands

    KPMG Netherlands has reportedly been breached by the Nova ransomware group, which claims to have exfiltrated sensitive data. The breach was indexed on January 23, 2026, with the attack believed to have occurred on the…

    5 articles · Updated January 26, 2026

Recent Intelligence Reports

  • Inside a Crypto Drainer: How to Spot it Before it Empties Your Wallet — Bleepingcomputer · May 21, 2026
  • Inside a Crypto Drainer: How to Spot it Before it Empties Your Wallet — Bleepingcomputer · May 21, 2026
  • Inspection: Cervical Cancer Lab Test Was Not Adequately Secured — nos.nl · May 13, 2026
  • Ransomware knocks Dutch healthcare software vendor offline — Theregister · April 8, 2026
  • Dutch healthcare software vendor goes dark after ransomware attack — Theregister · April 8, 2026
  • MacOS Stealer MioLab Adds ClickFix Delivery, Wallet Theft and Team API Tools — Cybersecuritynews · March 23, 2026
  • MioLab MacOS Stealer Expands With ClickFix, Wallet Theft, Team APIs — Gbhackers · March 23, 2026
  • MioLab MacOS Stealer Expands With ClickFix, Wallet Theft, Team APIs — Gbhackers · March 23, 2026

CVSS v3.1 Breakdown