Eurofins Scientific listed on nova ransomware leak site

• Ransomware group: nova
• Country: Netherlands
• Sector: Healthcare
• Announcement date: July 18, 2025

Eurofins Scientific targeted by nova ransomware group

The global life sciences organization Eurofins Scientific has been listed on a leak site associated with the ransomware group known as nova. On July 18, 2025, the threat actors behind nova published an announcement claiming that they have successfully gained access to data belonging to the organization.

Ransomware attacks often involve a tactic known as double extortion, where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive information to use as leverage. By threatening to release this data on public leak sites, attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential information. This method increases the pressure on organizations, as the leak of data can lead to significant reputational and legal consequences.

Details of the claim by nova

According to the announcement made by the nova group on July 18, 2025, the group claims to have breached the systems of Eurofins Scientific. While the group has officially listed the organization on their leak site, there is currently a lack of detailed information regarding the specifics of the breach. At this time, no screenshots or specific evidence have been provided by the threat actors to substantiate the claim or to demonstrate the extent of the unauthorized access.

The listing serves as a public notification from the group, but the absence of supporting documentation means the full scope of the incident remains unverified through the group's public statements. In many such incidents, threat actors may provide limited information initially, potentially releasing more details if their demands are not met, though no such details have been provided in this instance.

Information regarding the alleged data leak

The nature and the specific content of the data that has allegedly been compromised remain unknown. The announcement does not specify the types of files, the volume of data, or the specific databases that were targeted during the incident. Furthermore, the listing names no specific data types or affected categories.

When organizations face such claims, the uncertainty regarding the content of the stolen data creates significant challenges for incident response teams. Without knowing whether the breach involves intellectual property, employee records, or client information, the organization must conduct extensive forensic investigations to determine the true impact of the event. The lack of information from the attacker's side is a common occurrence in the early stages of a ransomware disclosure.

About Eurofins Scientific

Eurofins Scientific is a global life sciences company that provides analytical testing and laboratory services in the fields of food, environment, pharmaceuticals, and cosmetics. With a vast international network, the organization specializes in product safety and quality control.

Potential impact and industry implications

This incident may lead to disruptions in the organization's operational processes and could potentially impact its corporate reputation. Depending on the nature of the compromised data, the exposure of employee or customer information may result in legal sanctions and administrative fines under the General Data Protection Regulation (GDPR). The potential dissemination of such data could introduce secondary risks, such as identity theft or targeted phishing attacks directed at the individuals involved.

Given the sector in which the organization operates, the exposure of sensitive testing data might also affect supply chain security. In the life sciences and testing industry, the integrity and confidentiality of data are paramount to maintaining trust within the global supply chain. A breach in this sector can have ripple effects across various industries that rely on these testing services for product safety and quality assurance.

To mitigate such risks, organizations in this sector typically focus on robust defensive measures. This includes implementing strict access controls, maintaining comprehensive logging and monitoring to detect unauthorized access, and ensuring regular backups are kept offline or in immutable storage. Furthermore, maintaining a strong security posture through regular vulnerability management and employee training is essential to defend against the evolving tactics used by ransomware groups like nova, for which public information remains limited.