Divine IT listed on nova ransomware leak site

• Ransomware group: nova
• Country: Bangladesh
• Sector: Technology
• Announcement date: June 15, 2026

The ransomware group known as nova has listed the Bangladesh-based technology company Divine IT on its leak site. This announcement, made on June 15, 2026, marks a potential security incident involving the software and consultancy firm.

The claims made by nova

According to the announcement published by the nova group, the threat actors claim to have obtained data belonging to Divine IT. The group stated that they are willing to provide samples of the stolen data to the company, provided that the organization contacts their support department. This tactic is a common feature of modern ransomware operations, often referred to as double extortion, where attackers not only encrypt systems but also threaten to leak sensitive information to pressure victims into paying a ransom.

While the group has made these claims, the provided screenshot associated with the announcement does not contain any concrete evidence regarding the nature of the data or the validity of the breach. At this stage, the information remains a claim made by the threat group on their platform.

Details regarding the leaked data

The specifics regarding the stolen information remain unclear. The group has not provided any details concerning the volume of data or the specific types of files that were allegedly exfiltrated. Furthermore, the screenshot provided by the attackers does not contain any data samples or specific information that would clarify the contents of the alleged breach. The listing names no data types.

About Divine IT

Divine IT is a technology company based in Bangladesh. Established in 2005, the company is a CMMI Level 3 certified IT consultancy and software development firm. Divine IT specializes in several critical areas of the technology sector, including the development of ERP systems, the creation of security solutions, and the production of custom software applications designed for various industries.

Potential implications and industry context

This incident suggests that unauthorized access to Divine IT's corporate networks may have occurred. If the breach is confirmed, it could pose secondary risks to the company's clients and government organizations, particularly given the company's involvement in developing ERP systems and specialized software solutions. Such a breach could potentially harm the company's intellectual property and erode client trust. Additionally, a successful compromise of a software provider can create a foundation for supply chain attacks, where attackers leverage the trusted relationship between a vendor and its customers to gain further access to downstream networks.

In the broader cybersecurity landscape, ransomware leak sites serve as a public pressure mechanism for threat actors. When an organization is listed, it often faces the challenge of managing both technical recovery and reputational damage. For companies in the technology and software development sector, the stakes are particularly high due to the sensitive nature of the code and the data managed within the systems they build for others.

To defend against such threats, organizations typically implement a multi-layered security strategy. This includes maintaining robust backup protocols to ensure data can be restored, implementing strict access controls to limit the potential movement of an attacker within a network, and conducting regular security audits. Furthermore, monitoring for unauthorized access and maintaining a rapid incident response plan are essential components of modern cyber defense. For companies providing critical software infrastructure, ensuring the integrity of their development lifecycle is a vital step in preventing supply chain compromises.