Ang Brothers (M&E) Pte. Ltd. listed by Nova ransomware group
The threat actor known as Nova has made a data leak claim against ANG BROTHERS (M&E) PTE. LTD.
- Published
- 2 min read
- 2 min read
- Ransomware group: Nova
- Country: Singapore
- Sector: Manufacturing
- Announcement date: December 17, 2025
Nova ransomware group claims data breach against Ang Brothers (M&E) Pte. Ltd.
The threat actor known as Nova has made a data leak claim against ANG BROTHERS (M&E) PTE. LTD. On December 17, 2025, the group listed the institution on its leak site, alleging that the organization's data has been compromised.
Details of the claim
According to the announcement made by the Nova group, the institution's data was encrypted and subsequently sold. This type of claim is characteristic of modern ransomware operations, which often employ double extortion tactics. In such scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also exfiltrate sensitive information to use as leverage for extortion.
Publicly available information regarding the specific methods and identity of the Nova group remains limited. Ransomware leak sites serve as a platform for these groups to pressure victims by publicly announcing the breach and threatening to release stolen data if demands are not met. The presence of an organization on such a site indicates a high-pressure tactic intended to damage the victim's reputation and operational stability.
Information regarding the leaked data
At this time, there is no information provided regarding the nature of the leaked or threatened data. Furthermore, no screenshots have been made available to substantiate the claims made by the threat actor. The listing names no specific data types that have been targeted or stolen.
About Ang Brothers (M&E) Pte. Ltd.
Ang Brothers (M&E) Pte. Ltd. is a Singapore-based mechanical and electrical engineering firm. The company provides various engineering solutions and installation services for construction projects.
Potential impact and security implications
The leak claim may indicate that the institution's operational continuity could have been disrupted. If the claims are verified, negative impacts on the institution's supply chain security could be observed, as disruptions in one engineering firm can ripple through various construction projects and partner networks.
The sale of data may increase the risk of identity theft or targeted phishing attacks for the institution's employees and business partners. When sensitive corporate or personal information is traded on the dark web, it often becomes a resource for secondary attacks, such as business email compromise or highly convincing social engineering campaigns directed at specific stakeholders.
From a regulatory perspective, under Singapore's Personal Data Protection Act (PDPA), the institution may face data breach notification obligations. Organizations facing such threats typically focus on incident response, forensic investigation to determine the scope of the breach, and strengthening defensive perimeters. Common defensive steps for organizations in the manufacturing and engineering sectors include implementing robust access controls, maintaining offline backups, and conducting regular security awareness training to mitigate the risk of initial access through phishing.