BRDSoft listed on nova ransomware leak site

• Ransomware group: nova
• Country: Brazil
• Sector: Technology
• Announcement date: October 21, 2025

A new threat against BRDSoft

The technology company BRDSoft has been listed on the leak site of the ransomware group known as nova. According to an announcement published by the threat actors on October 21, 2025, the group claims to have successfully breached the organization's systems, resulting in a data leak.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's data to disrupt operations; they also steal sensitive information to threaten its public release. By listing a company on a dedicated leak site, these groups aim to damage the victim's reputation and force compliance with ransom demands by leveraging the threat of exposing proprietary or client information.

Details of the claimed breach

The announcement made by the nova group on October 21, 2025, asserts that the attackers gained unauthorized access to the organization's internal systems. This claim suggests a targeted intrusion aimed at exfiltrating sensitive data. However, at this stage, the threat actor has not provided any evidence or file samples to substantiate their claims regarding the organization's operations.

The listing currently provides no information regarding the specific nature of the leaked data, and no screenshots have been provided to verify the contents of the alleged breach. Furthermore, there is no information available regarding the volume of data stolen or the specific files that may have been compromised.

Affected data types

The current listing names no specific data types or categories of information that have been allegedly compromised.

About BRDSoft

BRDSoft is a technology company based in Brazil. The firm specializes in providing a variety of IT solutions and infrastructure services designed to optimize business processes. Their service portfolio is tailored toward several critical sectors, including telecommunications companies, call centers, hosting providers, and data centers.

Risk assessment and industry implications

This incident may pose significant risks to the organization's operational continuity and the trust established with its clients. If the breach is confirmed, secondary risks could emerge for the various telecommunications and data center clients served by the organization, potentially creating a ripple effect across the supply chain.

From a regulatory perspective, the organization may be subject to data breach notification requirements under Brazil's LGPD regulations. Organizations operating in the technology and infrastructure sectors must remain vigilant, as the potential misuse of leaked data for identity theft or targeted phishing attacks remains a significant concern in the aftermath of such incidents.

To mitigate such risks, organizations in the technology and telecommunications sectors typically focus on strengthening their defensive posture. This includes implementing robust access controls, maintaining rigorous patch management schedules, and conducting regular security audits. Furthermore, because information about the nova group remains limited in the public domain, organizations must prioritize monitoring for any signs of unauthorized access and prepare for the possibility of secondary attacks targeting their client base.