nova
First seen April 28, 2025Active178 claimed victims
The claims below are reproduced as posted by nova on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Nova (formerly RALord) is a ransomware-as-a-service (RaaS) group that encrypts victims’files and uses double-extortion tactics to pressure organizations into paying for decryption and data non-disclosure.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| SPZC | December 19, 2025 | ransomware_live | — |
| ANG BROTHERS (M&E) PTE. LTD. | December 17, 2025 | ransomware_live | — |
| strtn.org | December 15, 2025 | ransomware_live | — |
| ANG BROTHERS (M&E) PTE. LTD. (P4) | December 13, 2025 | ransomware_live | — |
| Novabio (france laboratories) | December 10, 2025 | ransomware_live | — |
| Tele-Fonika Cable Americas | December 9, 2025 | ransomware_live | — |
| grupopuma | December 9, 2025 | ransomware_live | — |
| ANG BROTHERS (M&E) PTE. LTD. (P3) | December 6, 2025 | ransomware_live | — |
| National Health Insurance Management Authority | December 5, 2025 | ransomware_live | — |
| Atenção Primária à Saúde Brazil | December 4, 2025 | ransomware_live | — |
| Caros co | November 27, 2025 | ransomware_live | — |
| ANG BROTHERS (M&E) PTE. LTD. (P2) | November 24, 2025 | ransomware_live | — |
| National Institute of Materials Physics | November 23, 2025 | ransomware_live | — |
| HostingFest | November 20, 2025 | ransomware_live | — |
| Medidores Industriales y Medicos SA de CV | November 15, 2025 | ransomware_live | — |
| SWISS ROSE Factory | November 15, 2025 | ransomware_live | — |
| ANG BROTHERS (M&E) PTE. LTD. (P1) | November 15, 2025 | ransomware_live | — |
| Stark Shipping | November 15, 2025 | ransomware_live | — |
| Saude Fortaleza | November 15, 2025 | ransomware_live | — |
| University of Gävle | November 15, 2025 | ransomware_live | — |
| Castilla | November 2, 2025 | ransomware_live | — |
| bassetti-group.com | October 29, 2025 | ransomware_live | — |
| Papsud | October 25, 2025 | ransomware_live | — |
| The Laxmi Niwas Palace | October 23, 2025 | ransomware_live | — |
| BRDSoft | October 21, 2025 | ransomware_live | — |
| Gruppe Lehnen | October 20, 2025 | ransomware_live | — |
| Alitech | October 17, 2025 | ransomware_live | — |
| Regency Specialist Hospital | October 16, 2025 | ransomware_live | — |
| ShareP | October 16, 2025 | ransomware_live | — |
| M3 Group Sp. z oo | October 16, 2025 | ransomware_live | — |
| Indaco Warna Dunia | October 13, 2025 | ransomware_live | — |
| Ministerio de Salud de la Nación argentina | October 12, 2025 | ransomware_live | — |
| ShapeCorp | October 11, 2025 | ransomware_live | — |
| Shape Corp | October 8, 2025 | ransomware_live | — |
| Kronospan | October 7, 2025 | ransomware_live | — |
| SD Soluciones Digitales | October 5, 2025 | ransomware_live | — |
| Dnc | October 5, 2025 | ransomware_live | — |
| Universite de Pau et du Pays de lAdour | September 29, 2025 | ransomware_live | — |
| FysioRoadmap | September 28, 2025 | ransomware_live | — |
| AV Services Barcelona | September 25, 2025 | ransomware_live | — |
| UNIDEL Ventures Pvt | September 3, 2025 | ransomware_live | — |
| Clinical Diagnosis [Deleted thread after 2 days] | August 22, 2025 | ransomware_live | — |
| Clinical Diagnosis | August 17, 2025 | ransomware_live | — |
| Eurofins Scientific (Healthcare) | July 22, 2025 | ransomware_live | — |
| Eurofins Healthcare | July 18, 2025 | ransomware_live | — |
| Eurofins Scientific | July 18, 2025 | ransomware_live | — |
| Dansoft | July 13, 2025 | ransomware_live | — |
| Ensemble Montplaisir | July 12, 2025 | ransomware_live | — |
| LCM Construção e Comércio S/A | July 11, 2025 | ransomware_live | — |
| Computer Ingenuity Associates | July 9, 2025 | ransomware_live | — |
| Eurofins | July 6, 2025 | ransomware_live | — |
| Rama judicial colombia | July 3, 2025 | ransomware_live | — |
| The University of Zagreb Faculty of Science | July 2, 2025 | ransomware_live | — |
| Portel Logistic Technologies | June 30, 2025 | ransomware_live | — |
| Epcatalogs Company | June 29, 2025 | ransomware_live | — |
| Feng Chia University | June 19, 2025 | ransomware_live | — |
| varico Poland | June 19, 2025 | ransomware_live | — |
| SunMoon university | May 28, 2025 | ransomware_live | — |
| VS One Technology | May 27, 2025 | ransomware_live | — |
| educo | May 27, 2025 | ransomware_live | — |
| Municipality of Pisa | May 10, 2025 | ransomware_live | — |
| novaevo+ / T.consulT | May 8, 2025 | ransomware_live | — |
| SJERP | April 29, 2025 | ransomware_live | — |
| DIALLOG | April 27, 2025 | ransomware_live | — |
| HELUKABEL | April 23, 2025 | ransomware_live | — |
| rawafid | April 23, 2025 | ransomware_live | — |
| agromate | April 22, 2025 | ransomware_live | — |
| bettininformatica - suporteon | April 16, 2025 | ransomware_live | — |
| Bio-Clima Service | April 16, 2025 | ransomware_live | — |
| ARRCO LSM | April 15, 2025 | ransomware_live | — |
| NewHotel cloud | April 15, 2025 | ransomware_live | — |
| Al-Hejailan Group | April 14, 2025 | ransomware_live | — |
| hasbco Company | April 10, 2025 | ransomware_live | — |
| Formosa Chang | March 30, 2025 | ransomware_live | — |
| Pere Claver grup | March 28, 2025 | ransomware_live | — |
| Ihara | March 27, 2025 | ransomware_live | — |
| Élan Sportif Nantes | March 25, 2025 | ransomware_live | — |
| Tomio Ingeniería | March 22, 2025 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).