The Nova ransomware group has listed two new organizations on its data leak blog. The group claims to have breached targets in Sweden and Spain, setting countdown timers for the public release of exfiltrated data.
The latest list of alleged victims posted by the group includes:
- University of Gävle (🇸🇪): A Swedish university college located in Gävle. Established in 1977, the university offers masters and bachelor’s degrees across technology, social sciences, and the humanities.
- Castilla (🇪🇸): A company based in Soria, Spain, that operates in the Consumer Services industry.
The threat actor claims to have exfiltrated significant data from both entities. According to the actor, the allegedly compromised data includes:
- From University of Gävle: 2TB of data.
- From Castilla: 10GB of data, including “customer service” information.












