Ransomware Group intelligence
Nova
ActiveTrack Nova with 179 published victims and 11 known leak locations in a single intelligence view.
Overview
Nova is tracked by Breach House as a ransomware group with 179 published victims.
United States is currently the most targeted country in this dataset.
11 known leak locations are currently associated with this group.
Leak Status Distribution
- Leaked 2 1.1%
- Pending 177 98.9%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (11)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 11 | Onion service | Down checked 5h ago | novak6fgohb7m6nm52lgpaaquntawixqsnpcptomwaiiz4mfydztatqd.onion |
| Leak location 10 | Onion service | Down checked 5h ago | novaf2pxzvb7xzkunlctqfuifatnp6pnhctvrqakizqflzr3rvqbnqid.onion |
| Leak location 9 | Onion service | Down checked 5h ago | novav75eqkjoxct7xuhhwnjw5uaaxvznhtbykq6zal5x7tfevxzjyqyd.onion |
| Leak location 8 | Onion service | Down checked 5h ago | novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion |
| Leak location 7 | Onion service | Down checked 5h ago | novag4k2te3mstt2xq5irywlpaw6edgkpiwgg4t2q7eecisj2qqtvbid.onion |
| Leak location 6 | Onion service | Down checked 5h ago | pifk3xu3vad6cuxsjll4qjomyaaaoyvnyqppro75pazadzctrrvpdnyd.onion |
| Leak location 5 | Onion service | Down checked 5h ago | novaxtychr6ohlc4zr5its73p6i7unpuhpwoodtzrg2y4w4seytatlid.onion |
| Leak location 3 | Onion service | Down checked 5h ago | novaoddh3vxylxqpsfdjprliknbzgbkv6nkazpzu3cvykrgpyzuywryd.onion |
| Leak location 4 | Onion service | Down checked 5h ago | novatd4577pzlvdyy42slydhrhru7fpcflbbxlajcmbfrgzyeis6d3id.onion |
| Leak location 2 | Onion service | Down checked 5h ago | leak7y2247fj7dbb35rpfyxuyaqtwbshiwxp6h35ttzlhrxmhvi4fead.onion |
| Leak location 1 | Onion service | Down checked 5h ago | novavdivko2zvtrvtllnq45lxhba2rfzp76qigb4nrliklem5au7czqd.onion |
Top Activity Sectors (17)
- Communication / Marketing 24
- IT 23
- Not identified 20
- Manufacturing / Engineering 17
- Healthcare / Pharma 15
- Public Sector 14
- Education 14
- Services 11
- Transportation / Travel / Logistics 9
- Construction / Real Estate 9
- Telecommunications 6
- Finance / Legal / Insurance 5
- Retail / E-commerce 5
- Hospitality / Food & Beverage / Tourism 2
- NGOs / Associations 2
- Energy 1
- Agriculture / Food 1
Typical Attacks (9)
▼MITRE ATT&CK does not currently catalogue Nova, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: nova executes malicious commands via PowerShell scripts to stage payloads and manipulate system processes.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: nova modifies registry run keys to ensure malware execution upon system reboot for persistence.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: nova disables antivirus tools and security software to prevent detection and hinder incident response.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1027.016 Junk Code Insertion Stealth
What they do: nova embeds junk code into its binaries to evade static analysis and signature-based detection.
What that means: Adversaries may use junk code / dead code to obfuscate a malware’s functionality.
-
T1070.004 File Deletion Stealth
What they do: nova deletes Volume Shadow Copies and backup directories via command-line utilities to eliminate recovery options.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1135 Network Share Discovery Discovery
What they do: nova scans network shares using native tools to identify victim files and expand its foothold.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: nova leverages SMB/Windows Admin Shares for lateral movement across networked systems within the victim environment.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: nova encrypts victim files using symmetric encryption to maximize disruption and ransom demand leverage.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: nova executes system recovery inhibition commands to prevent automatic restoration from backups or snapshots.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Ransom Notes (1)
▼The note this group leaves on a compromised machine. Click a filename to read it.
README-NOVA.me
----------------------------------------------------------------------------- Ransom ----------------------------------------------------------------------------- -> Hello , without any problems , if you see this Readme its mean you under controll by Nova ransomware , Data stolen and will be leaked if didn't contact us in 48 hours - encrypted files have ext .[victim_name]NV DON'T TOUCH IT -> Data from your network will be leaked in 10 days , take action and get in touch please --- make sure that the best way to less the time for you is contacted us to recover and decrypt your secret data and stop leak operation ----------------- >>> what we will provide and help with ? -> we will provide advanced decryptor easy for use and we will return every file or data we delete or stole from your Network -> we will give you link to download data stolen from your network as plus recover -> we provide report to how fix your network , and how we gain access and bypass your security, and some advice to up your security ----------------- >>> contact us here (use tor Browser to access chat): download tor from torproject.org ---------------- Chat system (TOR) join link : http://c43mpmijbb7rrvb3gc2w2hli7haeyrr2jlsl6xguveysfxwkt2iayjqd.onion/chat put any username to join ---------------- - our session messanger ID (Add ons , please use chat in tor to contact , contact in session if you can't access chat) : 054f55ec93aca9bac362b9d91eff36a7ce451e7caba47c0b2e004ba429f9529c79 (https://getsession.org) - also you can use qtox ID : 8E9A6195A769FE7115F087C61D75CF32874C339B3AB0947D07480C9A8A12DA5009151BE6A51F ----------------- >>> important notes : -> please do not touch the files becouse we can't decrypt it if you touch it -> please contact us today or soon a possible , becouse the leak operation should start , and we will not decrypt or recover you after time ----------------- - your leak post will be in our Blog : http://novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion/ ----------------------------------------------------------------------------- Ransom -----------------------------------------------------------------------------
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (179)
Search, filter and paginate the victim timeline for Nova. Showing 101–179 of 179.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | SPZC id24920 View details | Portugal | Education | pending | ||
|
Portugal A teachers' trade union organization that defends the rights of education workers, organizes strikes, and provides information about issues related to careers and working conditions. |
||||||
| Ransomware | Rconcept id24919 View details | Belgium | Manufacturing / Engineering | pending | ||
|
Belgium A company in the field of research, design and manufacture of mechanical and electrical parts. |
||||||
| Ransomware | ANG BROTHERS (M&E) PTE. LTD. id24846 View details | Singapore | Services | pending | ||
|
Encrypted 13/11/2025 | SOLD 16/12/2025 |
||||||
| Ransomware | strtn.org id24791 View details | United States | NGOs / Associations | pending | ||
|
The Tunisian Society of Radiology (STR) was created in 1952 by the late Doctor Ali Fourati under the name of the Tunisian Association of Electro-Radiology. |
||||||
| Ransomware | ANG BROTHERS (M&E) PTE. LTD. (P4) id24752 View details | Singapore | Communication / Marketing | pending | ||
|
ANG BROTHERS (M&E) PTE. LTD. (the "Company") is a Exempt Private Company Limited by Shares, incorporated on 22 July 2002 (Monday) in Singapore . The address of the Company's registered office is in the SHUN LI INDUSTRIAL PARK estate. The Company current operating status is live and has been operating for 23 years. This Company's principal activity is plumbing, heating (non-electric) and air-conditioning with steam and air-conditioning supply as the secondary activity - Rest (full 2.5TB) Data opened for sell, contact us via our contacts to buy |
||||||
| Ransomware | Novabio (france laboratories) id24676 View details | France | Healthcare / Pharma | pending | ||
|
Novabio is a medical biology laboratory that helps people across southwestern France get accurate health tests. Located in several regions including Dordogne and Gironde, the team runs complete medical examinations to support local communities' health needs. Their skilled professionals use modern equipment to deliver precise and reliable medical analysis for doctors and patients - the whole data of kalilab and france laboratories Data, Patients full informations, doctors informations, partners, finance, screening results, 500GB of data (millions of files) include PDFs, DOCs, XLSx, SQLs, SSH keys and lot more, network has encrypted, we are Ready to provide decryptor and delete full data, we will provide sample, reach us asap |
||||||
| Ransomware | grupopuma id24652 View details | Spain | Construction / Real Estate | pending | ||
|
Grupo Puma specializes in the construction industry, offering a range of products and services tailored to meet the needs of various clients. The company operates across multiple continents, providing solutions for construction projects in diverse geographical locations. Their expertise encompasses various aspects of construction, ensuring quality and efficiency in their offerings. Grupo Puma aims to serve clients in both the public and private sectors, contributing to the development of infrastructure worldwide - Local folders exf + therefore program creds and databases and more, contact us for tree |
||||||
| Ransomware | Tele-Fonika Cable Americas id24651 View details | United States | Communication / Marketing | pending | ||
|
TFKable Group is a global leader in the production of high and extra-high voltage cables, primarily serving the energy sector. The company specializes in supplying land cables and accessories for offshore wind farms in the Baltic Sea, contributing to renewable energy projects. With a strong focus on quality and innovation, TFKable conducts advanced research and testing to ensure the reliability of its products. The company is actively expanding its operations and investing in modern technologies to strengthen the domestic supply chain for the energy sector - 10GB exf sales data , finance, partners, costumers infos + workers, IDs, invoices etc, sample provided |
||||||
| Ransomware | ANG BROTHERS (M&E) PTE. LTD. (P3) id24483 View details | Singapore | Communication / Marketing | pending | ||
|
ANG BROTHERS (M&E) PTE. LTD. (the "Company") is a Exempt Private Company Limited by Shares, incorporated on 22 July 2002 (Monday) in Singapore . The address of the Company's registered office is in the SHUN LI INDUSTRIAL PARK estate. The Company current operating status is live and has been operating for 23 years. This Company's principal activity is plumbing, heating (non-electric) and air-conditioning with steam and air-conditioning supply as the secondary activity |
||||||
| Ransomware | National Health Insurance Management Authority id24442 View details | Kenya | Healthcare / Pharma | pending | ||
|
The National Health Insurance Scheme (NHIS) provides access to quality healthcare services, essential medicines, and state-of-the-art medical equipment. It aims to facilitate equitable contributions and access to healthcare for individuals and families, protecting them against catastrophic healthcare expenditures. NHIS offers a variety of benefit packages and allows companies to register their employees for coverage. The organization serves clients seeking affordable and convenient healthcare solutions - patients data exf, navigate us to deal samples provided |
||||||
| Ransomware | Atenção Primária à Saúde Brazil id24426 View details | Brazil | Communication / Marketing | pending | ||
|
Atenção Primária à Saúde is system provided by Ministério da Saúde of brazil, we have exf all sql files (100GB of SQL files) from them systems and clouds, millions of patients records, 50M> records lines, samples will be provided to company when its contact, the goal system https://esusbelacruz.fixtecnologia.com.br/ |
||||||
| Ransomware | Caros co id24276 View details | Korea, Republic of | Communication / Marketing | pending | ||
|
South Korea It was founded in 2009. It is engaged in the production and sale of general-purpose vehicles. Among the products: an ice maker, a water purifier, a water heater and others. |
||||||
| Ransomware | ANG BROTHERS (M&E) PTE. LTD. (P2) id24162 View details | Singapore | Communication / Marketing | pending | ||
|
ANG BROTHERS (M&E) PTE. LTD. (the "Company") is a Exempt Private Company Limited by Shares, incorporated on 22 July 2002 (Monday) in Singapore . The address of the Company's registered office is in the SHUN LI INDUSTRIAL PARK estate. The Company current operating status is live and has been operating for 23 years. This Company's principal activity is plumbing, heating (non-electric) and air-conditioning with steam and air-conditioning supply as the secondary activity |
||||||
| Ransomware | National Institute of Materials Physics id24152 View details | Romania | Education | pending | ||
|
Romania Scientific Institute in Bucharest. He is engaged in fundamental and applied research and development, in particular in the field of solid state physics and materials research. |
||||||
| Ransomware | HostingFest id24008 View details | United States | Retail / E-commerce | pending | ||
|
As HostingFest, we provide domain name (Domain), Hosting, VDS and Dedicated servers, E-commerce infrastructures and SEO services to our individual and corporate customers. Due to encryption, the official domain is currently inaccessible: https://hostingfest.net/ However, here is the archived site: https://web.archive.org/web/20250815130556/https://hostingfest.net/ . Contact methods : [email protected] / https://www.linkedin.com/company/hostingfest |
||||||
| Ransomware | University of Gävle id23917 View details | Sweden | Education | pending | ||
|
University of Gävle is a university college located in Gävle, Sweden. The university was established in 1977 and is currently organized into three academies and nine departments. The university offers around 45 masters- and bachelor's degrees and 800 courses in technology, social- and natural sciences and the humanities. ZoomInfo: https://www.zoominfo.com/c/ga%CC%88vle/1142576926 / Domain: https://www.hig.se/ |
||||||
| Ransomware | Saude Fortaleza id23916 View details | Brazil | Public Sector | pending | ||
|
Secretaria Municipal de Saude de Fortaleza is a company that operates in the Custom Software & IT Services industry. It employs 20 to 49 people and has 10M to 25M of revenue. The company is headquartered in Brazil. https://saude.fortaleza.ce.gov.br/ https://www.zoominfo.com/c/secretaria-municipal-de-sau%CC%81de-de-fortaleza/431949261 |
||||||
| Ransomware | Stark Shipping id23915 View details | Ukraine | Transportation / Travel / Logistics | pending | ||
|
Ukraine A maritime service provider with extensive experience in the Black and Azov seas. Offers port agency services, cargo chartering (for bulk and liquid goods), and market analysis for customers. Has a network of offices and strategic partnerships in Ukrainian ports. |
||||||
| Ransomware | ANG BROTHERS (M&E) PTE. LTD. (P1) id23914 View details | Singapore | Communication / Marketing | pending | ||
|
ANG BROTHERS (M&E) PTE. LTD. (the "Company") is a Exempt Private Company Limited by Shares, incorporated on 22 July 2002 (Monday) in Singapore . The address of the Company's registered office is in the SHUN LI INDUSTRIAL PARK estate. The Company current operating status is live and has been operating for 23 years. This Company's principal activity is plumbing, heating (non-electric) and air-conditioning with steam and air-conditioning supply as the secondary activity --- we have 3TB of data unziped, 1.05TB ziped, millions of documents and files, the data will be leaked in 15 parts, every part will have 250GB leaked and 10 days, company will contact us by guide we provide in network to recover encrypted files and restore systems, we will provide 1GB as sample, the data is really have everything sensitive you can imagine and lot of things, company profile : https://www.sgpbusiness.com/company/Ang-Brothers-Me-Pte-Ltd |
||||||
| Ransomware | SWISS ROSE Factory id23913 View details | Iran, Islamic Republic of | Communication / Marketing | pending | ||
|
Swiss Rose is a prominent company in the Iraqi market, recognized for its O2 brand, which focuses on various care products. Their offerings include home care, fabric care, surface care, and personal care categories. The company aims to provide quality cleaning solutions and personal care items to a diverse clientele. Established in 2019, Swiss Rose continues to expand its product range to meet consumer needs --- https://www.zoominfo.com/c/swiss-rose-factory/481426718 --- sample provided |
||||||
| Ransomware | Medidores Industriales y Medicos SA de CV id23912 View details | Mexico | Manufacturing / Engineering | pending | ||
|
MYIMSA specializes in industrial and medical instrumentation, particularly in the field of nuclear medicine. The company offers advanced technology and highly trained experts to ensure precise results for sample processing. Their product range includes hemoglobin analyzers, urine analyzers, and calibration services tailored to client needs. Committed to quality and precision, MYIMSA serves clients in both industrial and medical sectors |
||||||
| Ransomware | Castilla id23556 View details | Spain | Services | pending | ||
|
Castilla is a company that operates in the Consumer Services industry. It employs 5to9 people and has 1Mto5M of revenue. The company is headquartered in Soria, Castille and Leon, Spain. |
||||||
| Ransomware | bassetti-group.com id23486 View details | Germany | Manufacturing / Engineering | pending | ||
|
As a pioneer in industrial digitalization, the BASSETTI Group has been supporting its customers for over 30 years in transferring and enhancing the value of their technical heritage to ensure their sustainable industrial excellence. |
||||||
| Ransomware | Papsud id23347 View details | France | Communication / Marketing | pending | ||
|
Papsud is a company that operates in the Office Products Retail & Distribution industry. It employs 10to19 people and has 1Mto5M of revenue. The company is headquartered in Marseille, Provence-Alpes-Cote d'Azur, France - 100GB of data taking include gov billing and costumers infos, invoices and IDs details etc |
||||||
| Ransomware | The Laxmi Niwas Palace id23298 View details | India | Hospitality / Food & Beverage / Tourism | pending | ||
|
India A luxury historic hotel located in a palace in Bikaner, India. It was built in 1902 for Maharaja Ganga Singh and is now a popular tourist destination offering guests accommodation in the former royal palace. |
||||||
| Ransomware | BRDSoft id23251 View details | Brazil | Telecommunications | pending | ||
|
I.T and Telecomunications company. Help telecomunications company, callcenters, hosting companies, datacenter a ISP on a high number of solutions to make his business work bether. |
||||||
| Ransomware | Gruppe Lehnen id23226 View details | Germany | Communication / Marketing | pending | ||
|
Wir bauen für Ihre Zukunft. Die Gruppe mit Stammsitz in Sehlem weist bereits 90 Jahre Erfahrung im Tief- und Straenbau auf. Als modernes und leistungsfhiges Familienunternehmen mit heute über 270 qualifizierten Mitarbeitern sind wir dank jahrzehntelanger Erfahrung zuverlssiger und kompetenter Partner im Tief- und Straenbau. Mit dem Laden des Videos akzeptieren Sie die Datenschutzerklrung von YouTube. Unser kompetentes und hochmotiviertes Team braucht Unterstützung. Sollten wir für ein Stellenangebot Ihr Interesse geweckt haben, so freuen wir uns auf Ihre schriftliche Bewerbung. Für weitere Informationen klicken Sie bitte auf das jeweilige Stellenangebot. Das Downloadcenter hlt immer die wichtigsten und aktuellsten Dokumente Für Sie bereit. Hier finden Sie die aktuellen Preislisten unserer Hartsteinwerke, die Prqualifizierungsbesttigung, Broschüren zum Leistungsspektrum, unsere gültigen Freistellungsbescheinigungen und noch vieles mehr. Schauen Sie einfach mal rein - 350 GB of documents stolen , get in touch by follow readme |
||||||
| Ransomware | Alitech id23169 View details | Poland | IT | pending | ||
|
Poland Founded in 1996 as a family business, over the years of distribution of measuring quality control systems, Alitech continuously builds its position as a specialist in precision measurement engineering. Our portfolio includes with a top of 1000 entities, to which over the years we continuously supply the highest quality measuring equipment, physical size recorders, temperature, pressure, electrical size and mechanical quantities and advanced electronics of renowned manufacturers. |
||||||
| Ransomware | M3 Group Sp. z oo id23160 View details | Poland | Services | pending | ||
|
Poland IT company providing services in the areas of IT support, dedicated software, web software, implementation, consulting, and the delivery of IT systems for businesses. |
||||||
| Ransomware | ShareP id23159 View details | Switzerland | Construction / Real Estate | pending | ||
|
Switzerland Startup that provides a plug-and-play solution to digitize and optimize urban parking and electric vehicle (EV) charging infrastructure. Revenue - 31 million$ Employees - 29 |
||||||
| Ransomware | Regency Specialist Hospital id23157 View details | Malaysia | Healthcare / Pharma | pending | ||
|
Founded in 2009, Regency Specialist Hospital is a tertiary care hospital located in the growing township of Bandar Seri Alam in Malaysia. Regency Specialist Hospital provides specialist inpatient and outpatient healthcare services supported by a full range of diagnostic, radiology and clinical laboratory services. |
||||||
| Ransomware | Indaco Warna Dunia id23017 View details | Indonesia | Construction / Real Estate | pending | ||
|
Indonesia Wholesale building materials Revenue 6,4 million $ Employees 281 |
||||||
| Ransomware | Ministerio de Salud de la Nación argentina id22987 View details | Argentina | Healthcare / Pharma | leaked | ||
|
The Ministry of Health of Argentina is the agency responsible for coordinating and overseeing public health policy in the country. Its objective is to strengthen the health system in a federal and equitable manner, ensuring access to quality health services for the population. Since September 30, 2024, the Minister of Health is Mario Lugones, who assumed the position following the departure of Mario Russo. The ministry is also responsible for epidemiology, vaccination campaigns, and border health control, among other functions - The data include high sansitive informations for more then 2 millions patients in xlsx files , (APPLICATION_DATE; MONTH;PROVINCE; DEPARTMENT; LOCALITY; VACCINE; CONDITION; AGE_RANGE; REGISTRATION_DELAY_RANGE_DAYS; SEX;GENERIC_DOSE; QUANTITY - FECHA_APLICACION; MES;PROVINCIA; DEPARTAMENTO;LOCALIDAD; VACUNA; CONDICION; RANGO_ETARIO; RANGO_DEMORA_REGISTRO_DIAS; SEXO;DOSIS_GENERICA; CANTIDAD and lot more) we don't provide samples becouse its very private data but we provide tree to folders , all files in XLSx-organized files, get in touch |
||||||
| Ransomware | ShapeCorp id22972 View details | United States | Communication / Marketing | pending | ||
|
Shape Corp. is a global leader in automotive engineering and manufacturing, providing advanced crash management and body structure solutions utilizing ultra-high strength steel roll forming, tight tolerance aluminum extrusions and large tonnage injection molding. The company specializes in producing lightweight and innovative products that maximize performance while minimizing environmental impact. [[ Data extracted include Engineering design files, Marketing and presentation assets, CAD, mechanical designs, CNC programs, project documentation, automation data, brand media, financial, production, and quality assurance records etc.. ]] - (Update 11/10/2025) Tree sample Provided. highly proprietary data. Vendor Companies like Ford Motor, General Motors, Jaguar Land Rover, Magna International and other. |
||||||
| Ransomware | Shape Corp id22910 View details | United States | Communication / Marketing | pending | ||
|
Shape Corp. is a global leader in automotive engineering and manufacturing, providing advanced crash management and body structure solutions utilizing ultra-high strength steel roll forming, tight tolerance aluminum extrusions and large tonnage injection molding. The company specializes in producing lightweight and innovative products that maximize performance while minimizing environmental impact. [[ Data extracted include Engineering design files, Marketing and presentation assets, CAD, mechanical designs, CNC programs, project documentation, automation data, brand media, financial, production, and quality assurance records etc.. ]] |
||||||
| Ransomware | Kronospan id22866 View details | Austria | Communication / Marketing | pending | ||
|
Kronospan manufactures and distributes wood-based panels in addition to produces speciality and decorative paper and other products including melamine-faced panels, worktops, wall panels, window sills, lacquered HDF, compact boards, high pressure laminates (HPL), plywood and more |
||||||
| Ransomware | Dnc id22822 View details | Services | pending | |||
|
dnc is an innovative company that offers a range of services including business consulting, facility management, eBusiness solutions, and GDPR compliance. The company aims to help businesses enhance their image and profitability. They serve a variety of clients looking for expertise in improving operational efficiencies and adherence to regulations. dnc is also recognized as an official partner of Heron - we have 130GB of data include billing , plans , costumers full names , phone numbers , gmails , genders , plans , payments and invoices and lot more |
||||||
| Ransomware | SD Soluciones Digitales id22821 View details | Mexico | IT | pending | ||
|
Soluciones Digitales is a company that operates in the Commercial Printing industry. It employs 10to19 people and has 5Mto10M of revenue. The company is headquartered in Guadalajara, Jalisco, Mexico - 80GB data include invoices and resources , billing , Documents , reports etc |
||||||
| Ransomware | Universite de Pau et du Pays de lAdour id22653 View details | France | Education | pending | ||
|
The Université de Pau et du Pays de l'Adour was founded in 1972. It is a multi-site establishment, based in Pau, Bayonne, Tarbes, and Mont-de-Marsan and is part of the Academy of Bordeaux - we stole 80GB of data include Docs , reports , billing PDFs , Plans , Factory and payments Documents , Workers full infos , Complete student and Teachers data (Private IDs) , resources and lot more , we will provide decryptor + report + return and delete Data , follow readme to process |
||||||
| Ransomware | FysioRoadmap id22615 View details | Netherlands | Communication / Marketing | pending | ||
|
FysioRoadmap is een onderdeel van Monitored Rehab Systems. FysioRoadmap omvat het softwarepakket speciaal gemaakt en bedoeld voor de fysiotherapie. Het is een epd die werkt volgens de richtlijnen van het KNGF en gebruiksvriendelijkheid nastreeft voor de therapeuten. Monitored Rehab Systems doet meer dan alleen software maken: het maakt ook hardware voor de fysiotherapie en revalidatie. Producten zijn bijvoorbeeld de functional squat, de back extension, de pully, de MR Cube, Easy Slide en de Kneelax. Ideaal voor elke fysiotherapiepraktijk - we stole 10GB of data with more then 20k Docs have BSN numbers , phone numbers , full patients names and infos , sick-analyze results with pictures and lot more - readme in desktop to how contact and recover , get in touch |
||||||
| Ransomware | AV Services Barcelona id22589 View details | Spain | Services | pending | ||
|
AV Services Team specializes in providing comprehensive audiovisual services for events in Barcelona and Madrid, with over 15 years of experience. Their offerings include audiovisual production, hybrid events, streaming, videoconferencing, and equipment rental such as sound systems, LED screens, and lighting. The company is dedicated to delivering tailored solutions for each unique event, ensuring flexibility and agility in their service. They cater to corporate clients and have built a reputation for innovation and exceptional customer service - we have stole 100 GB of data include resources , billing , customers infos , Plans , Commercial Data , BCN and Factory Data , Archives , videos , pictures , Docs and lot more - readme in desktop with guide to recover the encrypted files , contact us and get in touch |
||||||
| Ransomware | UNIDEL Ventures Pvt id22110 View details | India | IT | pending | ||
|
The UniDEL Group has been providing technology solutions and products since 1973. SoftDEL Systems Ltd provides engineering software solutions for the US, European markets and Japanese markets... |
||||||
| Ransomware | Clinical Diagnosis [Deleted thread after 2 days] id21902 View details | Netherlands | Healthcare / Pharma | pending | ||
|
I want to reassure patients that their data was removed from the first Deal. The loss of credibility is the punishment we directed at the company, from which future victims will learn "Never, ever break anything that was agreed upon with our group during negotiations." We did not leak any data except for Sample, which was deleted. Don't worry, don't do stupid things against the company that wants to treat your diseases, all companies are vulnerable to hacking, there are loopholes everywhere, and the upcoming attacks will explain that , this post will be deleted after 2 days , we ask to all news to not scared any women or man, make sure all news posts fake if they say data is leaked, we also ask from company to explain how we help them to recover and Up they security , not just afraid your patients , we also ask from police to stay in them office and don't play with fire , and don't touch anything about us ,if you have quastions contact me , iam available in exploit /profile/207284-blackbeard/ , thanks to read , have good day! |
||||||
| Ransomware | Clinical Diagnosis id21806 View details | Netherlands | Healthcare / Pharma | pending | ||
|
you break the deal , you will pay |
||||||
| Ransomware | Eurofins Scientific (Healthcare) id21307 View details | Netherlands | Healthcare / Pharma | pending | ||
|
Eurofins Scientific is a global network of life sciences companies that offers a comprehensive range of analytical testing services to clients across various industries. The organization is recognized as a world leader in areas such as food, environmental, pharmaceutical, and cosmetic product testing... |
||||||
| Ransomware | Eurofins Scientific id21229 View details | Netherlands | Healthcare / Pharma | pending | ||
|
Eurofins Scientific is a global network of life sciences companies that offers a comprehensive range of analytical testing services to clients across various industries. The organization is recognized as a world leader in areas such as food, environmental, pharmaceutical, and cosmetic product testing... |
||||||
| Ransomware | Eurofins Healthcare id21226 View details | France | Healthcare / Pharma | pending | ||
|
Eurofins Scientific is a global network of life sciences companies that offers a comprehensive range of analytical testing services to clients across various industries. The organization is recognized as a world leader in areas such as food, environmental, pharmaceutical, and cosmetic product testing... |
||||||
| Ransomware | Dansoft id21121 View details | United States | Communication / Marketing | pending | ||
|
Dansoft, established in 1989, originally focused on defense projects but shifted to develop ERP and enterprise software systems across various industries. The company offers IT executive, cloud hosting... |
||||||
| Ransomware | Ensemble Montplaisir id21103 View details | France | Telecommunications | pending | ||
|
Le CFP dispense des formations tertiaires longues (BTS en alternance) et des formations courtes pour adultes. LISTM propose des for... |
||||||
| Ransomware | LCM Construção e Comércio S/A id21097 View details | Brazil | Communication / Marketing | pending | ||
|
LCM Construção focuses on providing high-quality engineering construction solutions with technical excellence and competitive costs. The company prioritizes sustainability and aims to meet the expectations of target clients, stakeholders, and employees... |
||||||
| Ransomware | Computer Ingenuity Associates id21082 View details | United States | IT | pending | ||
|
CIA Solutions are hotel consultants who specialize in software designed to help owners and operators manage profit, labor, budgets, and forecasts effectively. Their innovative solutions... |
||||||
| Ransomware | Eurofins id20990 View details | France | Healthcare / Pharma | pending | ||
|
Eurofins Scientific is a global network of life sciences companies that offers a comprehensive range of analytical testing services to clients across various industries. The organization is recognized as a world leader in areas such as food, environmental, pharmaceutical, and cosmetic product testing... |
||||||
| Ransomware | Rama judicial colombia id20989 View details | Colombia | Education | pending | ||
|
The University of Zagreb Faculty of Science (Croatian: Prirodoslovno-matematički fakultet, PMF) is a prominent faculty within the University of Zagreb, Croatia, dedicated to education... |
||||||
| Ransomware | The University of Zagreb Faculty of Science id20988 View details | Croatia | Education | pending | ||
|
The University of Zagreb Faculty of Science (Croatian: Prirodoslovno-matematički fakultet, PMF) is a prominent faculty within the University of Zagreb, Croatia, dedicated to education... |
||||||
| Ransomware | Portel Logistic Technologies id20987 View details | Spain | IT | pending | ||
|
Portel Logistic Technologies software solutions support financial, operational and logistics processes... |
||||||
| Ransomware | Epcatalogs Company id20986 View details | United States | Manufacturing / Engineering | pending | ||
|
EPCATALOGS specializes in providing electronic spare part catalogs, workshop manuals, and diagnostic software for the automotive and heavy machinery industries... |
||||||
| Ransomware | varico Poland id20736 View details | Poland | Finance / Legal / Insurance | pending | ||
|
varico.pl is the official website of Varico, a Polish company specializing in financial and accounting ... |
||||||
| Ransomware | Feng Chia University id20735 View details | Taiwan, Province of China | Education | pending | ||
|
Feng Chia University (FCU), located in Taichung, Taiwan, is a prominent private... |
||||||
| Ransomware | SunMoon university id20298 View details | Korea, Republic of | Education | pending | ||
|
The website sunmoon.ac.kr is the official online portal of Sun Moon University (SMU), a private, non-profit institution located in Asan... |
||||||
| Ransomware | educo id20278 View details | Spain | NGOs / Associations | pending | ||
|
Educo El Salvador, the Salvadoran branch of Educo, an international non-governmental organization (NGO) dedicated to... |
||||||
| Ransomware | VS One Technology id20263 View details | Sri Lanka | IT | pending | ||
|
VS One is a technology solutions provider based in Sri Lanka, established in 2019. The company specializes in distributing... |
||||||
| Ransomware | Municipality of Pisa id19960 View details | Italy | Public Sector | pending | ||
|
The website comune.pisa.it is the official portal of the Municipality of Pisa, Italy. It serves as the primary online resource for residents, busine... |
||||||
| Ransomware | novaevo+ / T.consulT id19937 View details | Italy | IT | pending | ||
|
"Novaevo" refers to a specialized software solution developed by T.consulT, an Italian company, designed to manage the lifecycle of technical documentation in industrial sectors, particularly aerospace and defense. The software ensures... |
||||||
| Ransomware | SJERP id19627 View details | Dominican Republic | Communication / Marketing | pending | ||
|
The website sj.com.do is the official platform for SJ ERP, a comprehensive Enterprise Resource Planning (ERP) software developed by JoS... |
||||||
| Ransomware | rawafid id19620 View details | Saudi Arabia | Manufacturing / Engineering | pending | ||
|
Established in 2008 and headquartered in Riyadh, Rawafid Industrial specializes in water infrastructure projects, including seawater and brackish water desalination, wastewater treatment... |
||||||
| Ransomware | Élan Sportif Nantes id19618 View details | France | Communication / Marketing | pending | ||
|
this Victim has been unlisted and operation leak has been stoped , we stop attacks on schools non-profit companys from 1 April , please contact our department to receive decryptor ... |
||||||
| Ransomware | Tomio Ingeniería id19617 View details | Argentina | Other | pending | ||
|
Data has been leaked shame on you and all who work with you |
||||||
| Ransomware | Ihara id19616 View details | Brazil | Other | pending | ||
|
Data has been leaked shame on you and all who work with you |
||||||
| Ransomware | Pere Claver grup id19615 View details | Spain | Other | pending | ||
|
Data has been leaked shame on you and all who work with you |
||||||
| Ransomware | Formosa Chang id19614 View details | Taiwan, Province of China | Other | pending | ||
|
Data has been leaked shame on you and all who work with you |
||||||
| Ransomware | hasbco Company id19613 View details | United States | Services | pending | ||
|
Data has been leaked shame on you and all who work with you |
||||||
| Ransomware | Al-Hejailan Group id19612 View details | Saudi Arabia | Services | pending | ||
|
Data has been leaked shame on you and all who work with you |
||||||
| Ransomware | NewHotel cloud id19611 View details | Portugal | IT | pending | ||
|
Data has been leaked shame on you and all who work with you |
||||||
| Ransomware | ARRCO LSM id19610 View details | Norway | Other | pending | ||
|
Data has been leaked shame on you and all who work with you |
||||||
| Ransomware | Bio-Clima Service id19609 View details | Italy | Other | pending | ||
|
Data has been leaked shame on you and all who work with you |
||||||
| Ransomware | bettininformatica - suporteon id19608 View details | Brazil | IT | pending | ||
|
BThe website bettininformatica.com.br belongs to Bettin Soluções em Informática, a technology company based in Marília, São Paulo, Brazil. They offer services such as computer maintenance... |
||||||
| Ransomware | agromate id19607 View details | Malaysia | Agriculture / Food | pending | ||
|
Agromate.com.my is the official website of Agromate Holdings Sdn Bhd, a leading Malaysian agricultural company specializing in fertilizer... |
||||||
| Ransomware | HELUKABEL id19605 View details | Germany | Manufacturing / Engineering | pending | ||
|
The website www.helukabel.de is the official online presence of HELUKABEL GmbH, a German-based global leader in the manufacturing ... |
||||||
| Ransomware | DIALLOG id19604 View details | Canada | Telecommunications | pending | ||
|
Diallog Telecommunications is a Canadian-owned and operated telecom company based in Toronto, established in 1998. Originally founded as ... |
||||||