Ransomware Group intelligence

Nova

Active

Track Nova with 221 published victims and 9 known leak locations in a single intelligence view.

Victims 221 Known published victims in this dataset
First discovered 2025-04-28 Earliest victim discovery date
Last discovered 2026-07-25 Latest victim discovery date
Inactive since 3 days Days since the latest known victim
Top country United States 28 victims
Known locations 9 Leak or negotiation infrastructure tracked

Overview

Nova is tracked by Breach House as a ransomware group with 221 published victims.

United States is currently the most targeted country in this dataset.

9 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (9)

    Label Type Availability Links
    Leak location 1 Onion service Unknown novavdivko2zvtrvtllnq45lxhba2rfzp76qigb4nrliklem5au7czqd.onion
    Leak location 2 Onion service Unknown leak7y2247fj7dbb35rpfyxuyaqtwbshiwxp6h35ttzlhrxmhvi4fead.onion
    Leak location 3 Onion service Unknown novaoddh3vxylxqpsfdjprliknbzgbkv6nkazpzu3cvykrgpyzuywryd.onion
    Leak location 4 Onion service Unknown novatd4577pzlvdyy42slydhrhru7fpcflbbxlajcmbfrgzyeis6d3id.onion
    Leak location 5 Onion service Unknown novaxtychr6ohlc4zr5its73p6i7unpuhpwoodtzrg2y4w4seytatlid.onion
    Leak location 6 Onion service Unknown pifk3xu3vad6cuxsjll4qjomyaaaoyvnyqppro75pazadzctrrvpdnyd.onion
    Leak location 7 Onion service Unknown novag4k2te3mstt2xq5irywlpaw6edgkpiwgg4t2q7eecisj2qqtvbid.onion
    Leak location 8 Onion service Unknown novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion
    Leak location 9 Onion service Unknown novav75eqkjoxct7xuhhwnjw5uaaxvznhtbykq6zal5x7tfevxzjyqyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (221)

    Search, filter and paginate the victim timeline for Nova. Showing 1–100 of 221.

    Type Target Discovered Country Business Category Intel Link
    Ransomware SistNet id30837 View details Italy IT
    Ransomware SistNet id30837 View details Italy IT
    Ransomware Center Of Information Technologies In Finance Public Institution id30834 View details Lithuania Public Sector
    Ransomware Center Of Information Technologies In Finance Public Institution id30834 View details Lithuania Public Sector
    Ransomware Center Of Information Technologies In Finance Public Institution id30834 View details Moldova, Republic of Public Sector
    Ransomware Digital Edge id30817 View details Singapore IT
    Ransomware Digital Edge id30817 View details Singapore IT
    Ransomware Digital Edge id30817 View details United States IT
    Ransomware VNSO id30759 View details Other
    Ransomware VNSO id30759 View details Other
    Ransomware VNSO id30759 View details Viet Nam Other
    Ransomware Marpatech id30740 View details Other
    Ransomware Marpatech id30740 View details Other
    Ransomware Marpatech id30740 View details Peru Other
    Ransomware Canal 9 Litoral id30741 View details Argentina Telecommunications
    Ransomware Canal 9 Litoral id30741 View details Argentina Telecommunications
    Ransomware La Financière d'Orion (finorion) id30737 View details France Finance / Legal / Insurance
    Ransomware La Financière d'Orion (finorion) id30737 View details France Finance / Legal / Insurance
    Ransomware Tèrra Aventura id30732 View details Portugal Transportation / Travel / Logistics
    Ransomware Tèrra Aventura id30732 View details Portugal Transportation / Travel / Logistics
    Ransomware Koperasi Karyawan PT Aplikanusa Lintasarta id30733 View details Indonesia IT
    Ransomware Koperasi Karyawan PT Aplikanusa Lintasarta id30733 View details Indonesia IT
    Ransomware Jrd logistics id30703 View details United States Transportation / Travel / Logistics
    Ransomware Jrd logistics id30703 View details United States Transportation / Travel / Logistics
    Ransomware Rumah Sakit Universitas Indonesia (RSUI) id30704 View details Indonesia Healthcare / Medicine
    Ransomware Rumah Sakit Universitas Indonesia (RSUI) id30704 View details Indonesia Healthcare / Medicine
    Ransomware Universidad Nacional de Mar del Plata id30705 View details Argentina Education
    Ransomware Universidad Nacional de Mar del Plata id30705 View details Argentina Education
    Ransomware Koplarla id30697 View details Other
    Ransomware Koplarla id30697 View details Indonesia Other
    Ransomware meralmanisa id30689 View details Türkiye Manufacturing / Engineering
    Ransomware meralmanisa id30689 View details Türkiye Manufacturing / Engineering
    Ransomware Dephub id30690 View details Indonesia Public Sector
    Ransomware Dephub id30690 View details Indonesia Public Sector
    Ransomware Jota Joias Premium id30691 View details Brazil Retail / E-commerce
    Ransomware Jota Joias Premium id30691 View details Brazil Retail / E-commerce
    Ransomware FMZ Tecnologia em Sistemas id30668 View details Brazil IT
    Ransomware FMZ Tecnologia em Sistemas id30668 View details Brazil IT
    Ransomware Phi id30634 View details Other
    Ransomware Phi id30634 View details Other
    Ransomware Phi id30634 View details Canada Other
    Ransomware Digipro id30635 View details Cyprus IT
    Ransomware Digipro id30635 View details Cyprus IT
    Ransomware Digipro id30635 View details Viet Nam IT
    Ransomware Integrated Marketing Services id30636 View details Communication / Marketing
    Ransomware Integrated Marketing Services id30636 View details Communication / Marketing
    Ransomware Integrated Marketing Services id30636 View details United States Communication / Marketing
    Ransomware Hynet id30384 View details United Kingdom IT
    Ransomware Hynet id30384 View details United Kingdom IT
    Ransomware NSW Rural Fire Service id30034 View details Australia Public Sector
    Ransomware NSW Rural Fire Service id30034 View details Australia Public Sector
    Ransomware NSW Government (RFS Department) id30037 View details Australia Public Sector
    Ransomware NSW Government (RFS Department) id30037 View details Australia Public Sector
    Ransomware vslmarine id30032 View details United Kingdom Transportation / Travel / Logistics
    Ransomware vslmarine id30032 View details United Kingdom Transportation / Travel / Logistics
    Ransomware vslmarine id30032 View details India Transportation / Travel / Logistics
    Ransomware lpgroup id30005 View details United Kingdom Finance / Legal / Insurance
    Ransomware lpgroup id30005 View details United Kingdom Finance / Legal / Insurance
    Ransomware alejandria id30006 View details Other
    Ransomware alejandria id30006 View details Other
    Ransomware transvill id30007 View details Other
    Ransomware transvill id30007 View details Other
    Ransomware transvill.com.pe id30000 View details Peru Transportation / Travel / Logistics
    Ransomware transvill.com.pe id30000 View details Peru Transportation / Travel / Logistics
    Ransomware alejandria.biz id30002 View details Argentina Other
    Ransomware alejandria.biz id30002 View details Argentina Other
    Ransomware lpgroup.pt id30004 View details Portugal Finance / Legal / Insurance
    Ransomware lpgroup.pt id30004 View details Portugal Finance / Legal / Insurance
    Ransomware cloudquantum id29993 View details United States IT
    Ransomware cloudquantum id29993 View details United States IT
    Ransomware cloudquantum id29993 View details Colombia IT
    Ransomware FTL-Fast Transit Line id29992 View details Transportation / Travel / Logistics
    Ransomware FTL-Fast Transit Line id29992 View details Transportation / Travel / Logistics
    Ransomware FTL-Fast Transit Line id29992 View details Belgium Transportation / Travel / Logistics
    Ransomware Lockers IT id30071 View details IT
    Ransomware Nhà Thành Phố id30070 View details Viet Nam Construction / Real Estate
    Ransomware Dosab id30065 View details Saudi Arabia Other
    Ransomware Hosab id30066 View details Other
    Ransomware MIT HJERTE id30067 View details Denmark Healthcare / Medicine
    Ransomware One Believing Interiors id30068 View details Construction / Real Estate
    Ransomware Desert Micro id30001 View details Manufacturing / Engineering
    Ransomware Sunass id29947 View details Peru Public Sector
    Ransomware Kedah id29926 View details Malaysia Public Sector
    Ransomware NSW Government id29891 View details Australia Public Sector
    Ransomware Divine IT id29893 View details Bangladesh IT
    Ransomware Sky devices id29894 View details United States
    Ransomware Bandung id29862 View details Indonesia Other
    Ransomware Trevi id29702 View details Italy Construction / Real Estate
    Ransomware Universitas Nasional id29660 View details Indonesia Education
    Ransomware Aspire hospital id29651 View details India Healthcare / Medicine
    Ransomware Everlite concept id29556 View details France Manufacturing / Engineering
    Ransomware IBENA Textilwerke id29557 View details Germany Manufacturing / Engineering
    Ransomware LTI Services and Larick Towing id29380 View details United States Transportation / Travel / Logistics
    Ransomware BC3 Tecnologia id29382 View details Brazil Manufacturing / Engineering
    Ransomware Daegu University AI Department id29389 View details Korea, Republic of Education
    Ransomware Badan Pangan Nasional id29399 View details Indonesia Public Sector
    Ransomware casasafer id29455 View details Italy Services
    Ransomware My English House academy id29460 View details Spain Education
    Ransomware Textile Testing Services of America id29495 View details United States Manufacturing / Engineering
    Ransomware sandox info id29499 View details Other