Nova 2026 activity
Ransomware group. 9 reports in 2 countries: 0 confirmed, 9 claimed or disputed. Latest 22 Jul 2026.
Vietnam
Indonesia🎯 What sources say
- Indonesia: Listed at least nine Indonesian victims in 2026, mostly public bodies, including Bojonegoro regency, Badan Pangan Nasional, BPOM Bandung, the transport ministry and RSUI. ransomware.live ransomware.live
- Vietnam: Listed four Vietnamese organisations between May and July 2026: AMACCAO, Nha Thanh Pho, Digipro and VNSO. ransomware.live Vietnam map
🚨 Reports
| Organisation | Country | Date | Sector | Type | Actor | What happened | Sources |
|---|---|---|---|---|---|---|---|
 ⚠️ ClaimedVNSO | Vietnam | 22 Jul 2026 | Other | Ransomware | Nova | Claimed. Nova listed VNSO on its leak site on 22 July 2026. | ransomware.live✓ 7 Nov |
| ⚠️ ClaimedRumah Sakit Universitas Indonesia (RSUI) | Indonesia | 20 Jul 2026 | Health | Ransomware | Nova | Claimed. Nova listed the University of Indonesia teaching hospital on its leak site. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedKementerian Perhubungan (Directorate General of Sea Transportation) | Indonesia | 19 Jul 2026 | Transport | Ransomware | Nova | Claimed. Nova listed the transport ministry's shipping and maritime directorate and threatened to leak maritime data. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedDigipro | Vietnam | 17 Jul 2026 | Other | Ransomware | Nova | Claimed. Nova listed Digipro on its leak site on 17 July 2026. | ransomware.live✓ 7 Nov |
| ⚠️ ClaimedNha Thanh Pho | Vietnam | 21 Jun 2026 | Other | Ransomware | Nova | Claimed. Nova listed Nha Thanh Pho on its leak site on 21 June 2026. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedBalai Besar POM di Bandung | Indonesia | 14 Jun 2026 | Health | Ransomware | Nova | Claimed. Nova listed the Bandung office of the food and drug regulator on its leak site. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedBadan Pangan Nasional | Indonesia | 29 May 2026 | Government | Ransomware | Nova | Claimed. Nova listed the national food agency on its leak site. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedAMACCAO | Vietnam | 22 May 2026 | Other | Ransomware | Nova | Claimed. Nova listed AMACCAO on its leak site on 22 May 2026. | ransomware.live✓ 7 Nov |
 ⚠️ ClaimedPemerintah Kabupaten Bojonegoro | Indonesia | 5 Apr 2026 | Government | Ransomware | Nova | Claimed. Nova listed the Bojonegoro regency government on its leak site. | ransomware.live✓ 7 Nov |
Leak-site listings are claims until the organisation or authorities confirm them. Methodology