nova
First seen April 28, 2025Active178 claimed victims
The claims below are reproduced as posted by nova on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Nova (formerly RALord) is a ransomware-as-a-service (RaaS) group that encrypts victims’files and uses double-extortion tactics to pressure organizations into paying for decryption and data non-disclosure.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| SistNet | July 25, 2026 | ransomware_live | — |
| Digital Edge | July 24, 2026 | ransomware_live | — |
| Center Of Information Technologies In Finance Public Institution | July 24, 2026 | ransomware_live | — |
| Canal 9 Litoral | July 22, 2026 | ransomware_live | — |
| Marpatech | July 22, 2026 | ransomware_live | — |
| VNSO | July 22, 2026 | ransomware_live | — |
| Koperasi Karyawan PT Aplikanusa Lintasarta | July 21, 2026 | ransomware_live | — |
| Tèrra Aventura | July 21, 2026 | ransomware_live | — |
| La Financière d'Orion (finorion) | July 21, 2026 | ransomware_live | — |
| Koplarla | July 20, 2026 | ransomware_live | — |
| Universidad Nacional de Mar del Plata | July 20, 2026 | ransomware_live | — |
| Rumah Sakit Universitas Indonesia (RSUI) | July 20, 2026 | ransomware_live | — |
| Jrd logistics | July 20, 2026 | ransomware_live | — |
| Jota Joias Premium | July 19, 2026 | ransomware_live | — |
| Dephub | July 19, 2026 | ransomware_live | — |
| meralmanisa | July 19, 2026 | ransomware_live | — |
| FMZ Tecnologia em Sistemas | July 18, 2026 | ransomware_live | — |
| Integrated Marketing Services | July 17, 2026 | ransomware_live | — |
| Digipro | July 17, 2026 | ransomware_live | — |
| Phi | July 17, 2026 | ransomware_live | — |
| Hynet | July 10, 2026 | ransomware_live | — |
| vslmarine | June 26, 2026 | ransomware_live | — |
| NSW Rural Fire Service | June 26, 2026 | ransomware_live | — |
| lpgroup.pt | June 24, 2026 | ransomware_live | — |
| alejandria.biz | June 24, 2026 | ransomware_live | — |
| transvill.com.pe | June 24, 2026 | ransomware_live | — |
| transvill | June 24, 2026 | ransomware_live | — |
| alejandria | June 24, 2026 | ransomware_live | — |
| lpgroup | June 24, 2026 | ransomware_live | — |
| FTL-Fast Transit Line | June 23, 2026 | ransomware_live | — |
| cloudquantum | June 23, 2026 | ransomware_live | — |
| Nhà Thành Phố | June 21, 2026 | ransomware_live | — |
| Lockers IT | June 21, 2026 | ransomware_live | — |
| One Believing Interiors | June 20, 2026 | ransomware_live | — |
| MIT HJERTE | June 20, 2026 | ransomware_live | — |
| Hosab | June 20, 2026 | ransomware_live | — |
| Dosab | June 20, 2026 | ransomware_live | — |
| Desert Micro | June 19, 2026 | ransomware_live | — |
| Kedah | June 16, 2026 | ransomware_live | — |
| Sunass | June 16, 2026 | ransomware_live | — |
| Sky devices | June 15, 2026 | ransomware_live | — |
| Divine IT | June 15, 2026 | ransomware_live | — |
| NSW Government | June 15, 2026 | ransomware_live | — |
| Bandung | June 14, 2026 | ransomware_live | — |
| Trevi | June 9, 2026 | ransomware_live | — |
| Universitas Nasional | June 6, 2026 | ransomware_live | — |
| Aspire hospital | June 5, 2026 | ransomware_live | — |
| IBENA Textilwerke | June 2, 2026 | ransomware_live | — |
| Everlite concept | June 2, 2026 | ransomware_live | — |
| BC3 Tecnologia | May 30, 2026 | ransomware_live | — |
| LTI Services and Larick Towing | May 30, 2026 | ransomware_live | — |
| Badan Pangan Nasional | May 29, 2026 | ransomware_live | — |
| Daegu University AI Department | May 29, 2026 | ransomware_live | — |
| My English House academy | May 27, 2026 | ransomware_live | — |
| casasafer | May 27, 2026 | ransomware_live | — |
| Eriell | May 26, 2026 | ransomware_live | — |
| sandox info | May 26, 2026 | ransomware_live | — |
| Textile Testing Services of America | May 26, 2026 | ransomware_live | — |
| SECONT Secretaria de Controle e Transparência | May 24, 2026 | ransomware_live | — |
| Adensa Teknoloji | May 24, 2026 | ransomware_live | — |
| University of Valencia | May 23, 2026 | ransomware_live | — |
| Hoy Construction | May 22, 2026 | ransomware_live | — |
| AMACCAO | May 22, 2026 | ransomware_live | — |
| Neubox | May 21, 2026 | ransomware_live | — |
| Softseba | May 21, 2026 | ransomware_live | — |
| Asian Lite International | May 19, 2026 | ransomware_live | — |
| Nordfjord Hotell | May 19, 2026 | ransomware_live | — |
| Veda Consulting Company | May 19, 2026 | ransomware_live | — |
| RADWAG | May 19, 2026 | ransomware_live | — |
| Wysza Szkoa Biznesu National Louis University | May 19, 2026 | ransomware_live | — |
| URG OEM | May 17, 2026 | ransomware_live | — |
| Don Bosco Technical Institute of Makati | May 17, 2026 | ransomware_live | — |
| BAUM Games | May 17, 2026 | ransomware_live | — |
| Desysweb | May 7, 2026 | ransomware_live | — |
| Reschio | April 30, 2026 | ransomware_live | — |
| Bimtrazer | April 30, 2026 | ransomware_live | — |
| CHARLES CONSEIL COORDINATION (3CCC) | April 21, 2026 | ransomware_live | — |
| International Business Solution de México | April 6, 2026 | ransomware_live | — |
| Pemerintah Kabupaten Bojonegoro | April 5, 2026 | ransomware_live | — |
| M&K Foam Koło | April 5, 2026 | ransomware_live | — |
| EMCO Electric International | April 4, 2026 | ransomware_live | — |
| Wolf Technology Group | April 2, 2026 | ransomware_live | — |
| VX Case | March 29, 2026 | ransomware_live | — |
| Mid-America Export Experts | March 14, 2026 | ransomware_live | — |
| Nebraska Hearing | February 24, 2026 | ransomware_live | — |
| Nebraska Health Imaging | February 17, 2026 | ransomware_live | — |
| RPS Consulting | February 9, 2026 | ransomware_live | — |
| Open Retail | February 7, 2026 | ransomware_live | — |
| KREISEL | January 26, 2026 | ransomware_live | — |
| KPMG | January 23, 2026 | ransomware_live | — |
| CYMA | January 22, 2026 | ransomware_live | — |
| The National Auto Loan Network | January 14, 2026 | ransomware_live | — |
| Dubai Air Wing | January 13, 2026 | ransomware_live | — |
| Cisneros group | January 11, 2026 | ransomware_live | — |
| Epi du Rouergue | January 6, 2026 | ransomware_live | — |
| Saplog Group | January 5, 2026 | ransomware_live | — |
| APC Home Health Service | December 29, 2025 | ransomware_live | — |
| CYMA SYSTEMS | December 25, 2025 | ransomware_live | — |
| Sense Eletronica | December 23, 2025 | ransomware_live | — |
| Rconcept | December 19, 2025 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).