Ang Brothers (M&E) Pte. Ltd. targeted by nova ransomware group

• Ransomware group: nova
• Country: Singapore
• Sector: Manufacturing
• Announcement date: November 15, 2025

The Singapore-based manufacturing and engineering firm ANG BROTHERS (M&E) PTE. LTD. has been listed on a ransomware leak site by a threat actor known as nova. The announcement, made on November 15, 2025, indicates a significant data breach targeting the organization's digital infrastructure.

Claims made by the nova group

According to the claims made by the nova group, the attackers have successfully obtained a massive volume of data belonging to ANG BROTHERS (M&E) PTE. LTD. The group has asserted that they have acquired approximately 3TB of data, which they intend to release in a structured manner. Specifically, the group stated that the stolen information will be leaked in 15 separate parts, with each individual part consisting of 250GB of data.

In addition to the threat of leaking the data, the group has indicated that the company must contact them to facilitate the recovery of encrypted files and to restore their operational systems. This approach is consistent with a double-extortion strategy, a common tactic used by modern ransomware groups. In such scenarios, attackers do not merely encrypt a victim's files to disrupt operations; they also steal sensitive information to use as leverage, threatening to publish it on public leak sites if the ransom is not paid.

Details regarding the stolen data

While the group has made broad claims regarding the scale of the theft, they have not provided specific details regarding the exact content of the leaked data. The only information provided by the group is a general claim that the stolen data contains "everything sensitive." Consequently, the listing names no specific data types.

Organization profile

ANG BROTHERS (M&E) PTE. LTD. is an engineering firm headquartered in Singapore. The company's primary operations are centered within the fields of plumbing, heating systems, and the installation and maintenance of air-conditioning systems.

Potential impact and industry implications

This incident poses a significant threat to the organization's operational continuity and data privacy. The scale of the claimed data theft suggests that the breach could have far-reaching consequences for the company's ability to function normally. Furthermore, depending on the actual sensitivity of the data involved, the organization may face secondary risks, such as identity theft or targeted phishing attacks directed at its employees and customers.

From a regulatory perspective, the company may face specific challenges under Singapore's Personal Data Protection Act (PDPA). This includes potential data breach notification obligations and the risk of legal sanctions. The incident highlights the ongoing risks faced by the engineering and manufacturing sectors, where maintaining the integrity of technical and client data is vital.

To mitigate such risks, organizations in this sector typically focus on robust defensive measures. These include maintaining regular, offline backups to ensure system restoration, implementing strict access controls to limit data exposure, and conducting regular security awareness training to prevent initial access via phishing. As the group's information remains limited, the situation remains a developing threat to the targeted entity.