Dephub listed on nova ransomware leak site

• Ransomware group: nova
• Country: Indonesia
• Sector: Government & Defense
• Announcement date: July 19, 2026

Nova claims unauthorized access to Dephub network

The threat group known as nova has listed data allegedly belonging to the Directorate of Shipping and Maritime Affairs (Dephub) on its leak site. This announcement, which appeared on July 19, 2026, implies a claim of unauthorized access to the organization's network. Such incidents are characteristic of modern ransomware operations, where attackers often employ double extortion tactics. In these scenarios, threat actors not only encrypt an organization's systems to disrupt operations but also steal sensitive data to pressure the victim into paying a ransom by threatening to leak the information publicly.

The announcement was published by the nova group on its dedicated leak site. While the group has made this claim, the provided information remains limited. Specifically, the screenshot associated with the announcement does not contain any data samples or detailed information regarding the breach. The visibility of the incident is currently limited to the group's own platform, and the public availability of information regarding this specific group remains restricted.

Details regarding the alleged data leak

At this stage, there is no information regarding the nature of the allegedly leaked data. The listing does not specify the types of files or the volume of information that may have been compromised. Furthermore, the screenshot provided by the group displays an error message rather than any specific data samples. The listing names no data types.

In many ransomware attacks, the lack of immediate data samples can be due to several factors, such as the group's preference for private negotiations or technical issues during the upload process. However, the absence of specific details makes it difficult to assess the immediate impact of the breach on the organization's data integrity or confidentiality at this time.

About Dephub

The Directorate General of Sea Transportation, known as Dephub, operates under the Indonesian Ministry of Transportation. It serves as the official government agency responsible for regulating the country's maritime transport, port management, and maritime safety policies. As a critical component of Indonesia's infrastructure, the agency plays a vital role in maintaining the safety and efficiency of the nation's maritime operations.

Implications and organizational risks

This incident suggests that cyberattacks against government institutions may pose significant risks to the continuity of public services and the confidentiality of sensitive data. If the leak is verified, negative impacts on the organization's operational processes may be observed. Furthermore, the institution may face legal obligations under Indonesian data protection regulations following such an event.

Beyond the immediate operational disruption, secondary risks must be considered. These include the potential use of leaked data for identity theft or targeted phishing attacks against employees or citizens. When government entities are targeted, the scope of the impact can extend far beyond the organization itself, potentially affecting public trust and national maritime security protocols.

To mitigate such risks, organizations in the government and defense sector typically focus on several defensive strategies. These include implementing robust network segmentation to prevent lateral movement by attackers, enforcing multi-factor authentication across all access points, and maintaining rigorous patch management schedules to close vulnerabilities. Additionally, continuous monitoring of network traffic and regular backups that are stored offline or in immutable environments are essential for ensuring service continuity and resilience against ransomware-driven disruptions.