BC3 Tecnologia listed on nova ransomware leak site

• Ransomware group: nova
• Country: Brazil
• Sector: Technology
• Announcement date: May 30, 2026

The Brazil-based technology company BC3 Tecnologia has been listed on the leak site of the ransomware group known as nova. The threat actors claim to have targeted the organization, announcing the breach on May 30, 2026. This incident follows a pattern common in modern cyberattacks where threat actors utilize dedicated leak sites to pressure victims into meeting their demands.

The claims made by nova

The nova group has published an announcement on their leak site claiming that they have obtained data belonging to BC3 Tecnologia. In their communication, the threat actors have included a tree structure and samples of the allegedly stolen data to demonstrate the scope of their intrusion. Furthermore, the group has offered to decrypt two specific files if the company chooses to contact their designated support department.

Ransomware groups often employ a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. The threat of releasing this stolen information on a public leak site serves as significant leverage to coerce the victim into paying a ransom. By providing samples and directory structures, these groups attempt to prove the validity of their claims and increase the psychological pressure on the target organization.

Details regarding the alleged data breach

Regarding the specific contents of the alleged breach, there is no detailed information available concerning the exact nature of the shared data. While the group provided a screenshot as part of their announcement, this provided imagery does not verify the actual content of the files. The listing names no specific data types that were allegedly compromised.

When organizations face such threats, the lack of clarity regarding what was stolen makes it difficult to assess the immediate impact. Without confirmed details on the volume or specific categories of the data, the organization must rely on internal forensic investigations to determine the true scope of the incident. This uncertainty is a common challenge during the early stages of a ransomware investigation.

Organization profile

BC3 Tecnologia is a Brazilian technology company that specializes in the development and sale of ERP (Enterprise Resource Planning) software. Their solutions are specifically designed for the corrugated packaging and cartonage industry. The company's flagship product is an ERP solution known as KRP-Nova.

Potential impact and organizational risks

This incident may lead to operational disruptions and reputational damage for the organization. The allegedly leaked data could contain technical information related to their ERP software or customer data, which may result in legal liabilities under Brazil's LGPD. As a secondary risk, the leaked data could be utilized for identity theft or supply chain attacks.

For companies operating within the technology and software development sectors, such incidents highlight the importance of robust security frameworks. A breach involving ERP software is particularly sensitive, as these systems often sit at the heart of an organization's business processes and contain vital information regarding clients and operations. A successful attack can lead to a loss of trust among industry partners and customers alike.

To mitigate such risks, organizations typically implement defensive measures such as regular security audits, multi-factor authentication, and comprehensive data encryption. Monitoring for unauthorized access and maintaining offline backups are also standard practices to defend against the disruptive nature of ransomware. As the investigation into this specific claim continues, the potential for secondary attacks remains a significant concern for the affected entity and its stakeholders.