Epcatalogs Company listed on nova ransomware leak site

• Ransomware group: nova
• Country: United States
• Sector: Manufacturing
• Announcement date: June 29, 2025

Epcatalogs Company targeted by nova ransomware group

The ransomware group known as nova has listed Epcatalogs Company on its dedicated leak site. This announcement, made on June 29, 2025, indicates a significant security incident involving the US-based organization. The group claims to have successfully breached the company's systems, leading to the unauthorized acquisition of various datasets. This development highlights the ongoing threat posed by ransomware actors who target specialized industrial service providers.

Details of the claimed attack

According to the announcement posted by the nova group, the attackers claim to have gained access to the internal systems of Epcatalogs Company on June 29, 2025. The group asserts that they have obtained various datasets during this intrusion. The nature of the announcement suggests that the compromised information pertains to the company's operational processes, potentially exposing the inner workings of their business model and service delivery.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. In many modern cyberattacks, actors employ a tactic known as double extortion. In this scenario, attackers do not just encrypt a company's data to disrupt operations; they also steal sensitive information before the encryption occurs. They then threaten to publish this stolen data on public forums or leak sites if the ransom is not met. This tactic increases the pressure on the victim, as the threat shifts from simple operational downtime to permanent reputational damage and legal consequences resulting from data exposure.

Reported compromised data types

The leaked content, as reported by the attackers, is said to include a wide range of sensitive information. The specific datasets mentioned in the leak include:

• Program source code
• Payment records
• Backups
• Deal databases
• Certificates
• Network logs

The inclusion of such diverse data types suggests a deep level of access within the victim's network. When attackers obtain items like network logs and source code, they gain a roadmap of the organization's digital environment, which can be used to facilitate further malicious activities.

About Epcatalogs Company

Epcatalogs Company is an organization based in the United States. The company operates within the manufacturing sector, specifically providing specialized digital resources for the automotive and heavy machinery industries. Their service portfolio includes the provision of electronic spare part catalogs, workshop manuals, and diagnostic software designed to support maintenance and repair operations in these industrial sectors.

Implications and potential risks

This incident may have negative implications for Epcatalogs Company's intellectual property and trade secrets. The exposure of proprietary source code and internal network logs could potentially increase the risk of secondary attacks against the company's digital infrastructure, as these assets provide attackers with technical insights into how the company's systems are structured and how their software functions.

Furthermore, as a US-based entity, any potential data breach may be subject to state-level privacy laws and regulations. The exposure of payment records and deal databases could trigger various legal compliance requirements depending on the jurisdiction and the nature of the data involved. Because information about the nova group remains limited, it is difficult to determine their specific long-term motives, but the risk to the company's operational continuity remains high given the nature of the claimed theft.

In general, organizations in the manufacturing and industrial software sectors can take several defensive steps to mitigate such risks. Implementing robust access controls and multi-factor authentication can help prevent unauthorized entry. Regular, offline backups are essential for recovery, though they do not prevent data theft. Additionally, monitoring network logs for unusual activity and implementing strict data loss prevention measures can help detect and stop exfiltration attempts before they result in a major breach. Maintaining a comprehensive incident response plan is also critical for managing the fallout of a potential leak.