The Nova ransomware group claims to have breached the National Health Insurance Management Authority (NHIMA), the government body responsible for managing Zambia’s compulsory national health insurance scheme. NHIMA is tasked with providing equitable access to quality healthcare services and essential medicines for Zambian citizens and families. The threat actors have listed the organization on their leak site, initiating a 12-day countdown for the potential publication of stolen information.
According to the actor, approximately 1GB of data was exfiltrated from the organization’s systems. The allegedly compromised data includes:
-
Patient data
-
Internal documents and samples












