Élan Sportif Nantes listed on nova ransomware leak site

• Ransomware group: nova
• Country: France
• Sector: Education
• Announcement date: April 28, 2025

The ransomware group known as nova has listed the French organization Élan Sportif Nantes on its leak site. The group claims to have conducted a ransomware attack against the institution, marking a potential breach for the sports and educational entity.

The claims made by nova

According to the claims made by the nova group, the ransomware attack against Élan Sportif Nantes was conducted around March 25, 2025. While the group has identified the institution as a victim, they have also provided specific statements regarding their operational targets. The group stated that, as of April 1, 2025, they have ceased all attacks directed at schools and non-profit organizations.

Following this stated policy shift, the group indicated that the operation involving the victim has been terminated. Furthermore, the group noted that the institution has been removed from their leak list. It remains unclear whether these statements represent a genuine strategic shift in the group's targeting methodology or are part of a broader public relations effort to manage their reputation within the cybercrime ecosystem.

Data involved in the incident

Regarding the specific contents of the alleged breach, no information has been provided by the group concerning the nature of the leaked or compromised data. The listing does not specify any details regarding the volume of files or the specific types of information that may have been targeted during the incident.

Organization profile

Élan Sportif Nantes is a sports club and educational institution located in Nantes, France. The organization primarily focuses on providing sports training and various physical activity programs designed for youth.

Analysis and sector implications

The alleged attack on Élan Sportif Nantes may pose significant risks to the institution's operational continuity and the privacy of the data they manage. For organizations operating within the education sector, the protection of personal data is a critical priority. Such institutions are subject to significant obligations regarding data privacy under the General Data Protection Regulation (GDPR), which mandates strict standards for how personal information is handled and protected.

The actual impact on the institution remains uncertain, as it depends heavily on whether an actual data breach occurred during the alleged incident. In the context of modern cyber threats, ransomware groups often utilize double extortion tactics, where they not only encrypt an organization's systems to disrupt operations but also threaten to leak sensitive data to pressure the victim into paying a ransom. This dual approach increases the pressure on organizations to maintain robust defensive postures.

For institutions in the education and non-profit sectors, maintaining strong cybersecurity hygiene is essential. This includes implementing regular software updates, enforcing multi-factor authentication, and conducting regular backups of critical data to ensure operational resilience. While information regarding the specific capabilities and history of the nova group remains limited, the incident highlights the ongoing risks faced by educational and community-based organizations.