Ang Brothers (M&E) Pte. Ltd. targeted by nova ransomware group

• Ransomware group: nova
• Country: Singapore
• Sector: Manufacturing
• Announcement date: December 13, 2025

A massive data leak claimed by nova

The threat actor known as nova has listed a significant amount of data allegedly belonging to the Singapore-based organization Ang Brothers (M&E) Pte. Ltd. on its dedicated leak site. According to the announcement made on December 13, 2025, the group claims that the stolen information is available for sale and has invited interested parties to contact them to facilitate a transaction. This incident suggests that the company's operational data may have been compromised during the attack.

Ransomware leak sites are platforms used by cybercriminal groups to pressure victims into paying ransoms. In many modern cyberattacks, threat actors employ a strategy known as double extortion. This method involves not only encrypting a victim's systems to disrupt business operations but also exfiltrating sensitive data before the encryption occurs. By threatening to release this stolen information publicly or selling it to the highest bidder, the attackers increase their leverage, as the victim faces reputational damage and legal consequences if the data is exposed.

Details of the claimed data breach

The announcement made by the nova group specifies a substantial volume of information that has been targeted. The group claims that approximately 2.5TB of data has been compromised. While the specific file types or a detailed inventory of the stolen files were not provided in the leak site announcement, the volume of data suggests a significant impact on the organization's digital assets.

The listing names no specific data types, but it is noted that the information is allegedly related to the company's core business operations. The scale of the alleged leak, totaling 2.5TB, indicates that the breach could potentially involve a wide array of corporate and operational documentation.

About Ang Brothers (M&E) Pte. Ltd.

Ang Brothers (M&E) Pte. Ltd. is a mechanical and electrical engineering company headquartered in Singapore. The firm operates primarily within the technical services sector, focusing on specialized engineering solutions. Its core business activities include plumbing, the implementation of heating systems, and the professional installation and maintenance of air-conditioning systems.

Implications and organizational risks

This incident highlights the potential risks that engineering and utility-focused firms face regarding the exposure of trade secrets and critical operational data. When sensitive corporate information is leaked, organizations may face significant legal obligations. For a company based in Singapore, this could include compliance requirements under the Personal Data Protection Act (PDPA), which governs how organizations must handle and protect personal data.

Beyond the immediate legal concerns, there are several secondary risks associated with such breaches. The exposure of operational data can lead to corporate espionage, where competitors or malicious actors gain insights into a company's proprietary processes or client lists. Additionally, leaked data can be utilized for identity theft or other fraudulent activities targeting the company or its stakeholders.

In response to such threats, it is generally advised that organizations initiate formal data breach notification procedures. This involves informing the relevant regulatory authorities and the parties affected by the breach. Strengthening defensive postures through regular audits, robust encryption, and comprehensive employee training is a standard recommendation for organizations operating in sectors that handle sensitive technical and operational information.