AV Services Barcelona listed on nova ransomware leak site

• Ransomware group: nova
• Country: Spain
• Sector: Professional Services
• Announcement date: September 25, 2025

Spain-based AV Services Barcelona targeted by nova ransomware group

The ransomware group known as nova has listed the Spanish professional services firm AV Services Barcelona on its leak site. According to the announcement, which was published on September 25, 2025, the group claims to have successfully carried out a cyberattack against the organization, resulting in a significant data breach.

Claims of system encryption and data exfiltration

The nova group has made several claims regarding the nature of their attack against AV Services Barcelona. The group states that they have exfiltrated approximately 100 GB of data belonging to the company. In addition to the data theft, the attackers claim to have encrypted the organization's internal systems, effectively disrupting their digital operations. To facilitate the extortion attempt, the group reported that they left a guide for the company to follow regarding ransom payment instructions.

The announcement, appearing on September 25, 2025, suggests that the company's commercial and operational data may be at significant risk due to this incident. This type of activity is characteristic of modern ransomware operations where attackers do not merely lock systems but also steal sensitive information to increase their leverage.

Details of the allegedly leaked data

The data allegedly stolen by the nova group is described as being quite diverse, covering various aspects of the company's business operations. According to the group's claims, the leaked information includes a wide range of sensitive materials. The content reportedly consists of:

• Customer information
• Billing information
• Commercial data
• Corporate documents
• Resources
• Plans
• Barcelona and factory data
• Archives
• Videos
• Pictures
• Various documents

The breadth of this alleged data suggests that the attackers may have gained access to deep layers of the organizational infrastructure, potentially impacting both administrative and operational workflows.

About AV Services Barcelona

AV Services Team is a company based in Barcelona and Madrid that provides audiovisual production, live streaming, video conferencing, and equipment rental services for events. With over 15 years of experience, they offer tailored solutions and technical support to corporate clients.

Analysis and potential implications

This incident may pose a threat to the company's operational continuity and customer privacy. The presence of customer and billing information in the leaked data could lead to legal sanctions under GDPR. Furthermore, the exposure of such data may bring secondary risks such as identity theft and targeted phishing attacks for the affected customers.

Public information about the nova group is limited; however, it appears that the group employs a double-extortion method by encrypting and leaking data. In a double-extortion scenario, attackers first steal sensitive data and then encrypt the victim's systems. This gives them two ways to demand payment: one to regain access to their own systems and another to prevent the public release of stolen information.

For organizations in the professional services sector, such incidents highlight the critical importance of robust cybersecurity frameworks. To mitigate these risks, companies often implement defensive measures such as regular offline backups, multi-factor authentication (MFA), and strict network segmentation. Additionally, when a breach occurs, organizations may need to fulfill data breach notification obligations and inform the affected parties to comply with regulatory requirements and protect their clients from secondary threats like phishing.