Feng Chia University listed on nova ransomware leak site

• Ransomware group: nova
• Country: Taiwan
• Sector: Education
• Announcement date: June 19, 2025

Nova group claims attack on Feng Chia University

The threat group known as nova has listed Feng Chia University on its leak site, alleging a cyberattack against the institution. This announcement, which was published on June 19, 2025, marks a new instance of a ransomware group targeting an academic entity. The entry is currently listed on the group's leak platform, though the specific details surrounding the claim remain limited.

The event involves a claim made by the nova group that they have successfully targeted the university. According to the announcement, the incident occurred on June 19, 2025. However, technical observations of the group's platform indicate that the specific page dedicated to this incident is currently inaccessible. A screenshot of the leak site shows that the page cannot be found, making it impossible to view the full details of the group's claims at this time.

Details regarding the alleged data breach

At this stage, there is no information regarding the nature of the allegedly leaked data. The group has not provided specifics regarding the volume of files or the total size of the data involved. Furthermore, no ransom demand has been specified in the available information. Because the relevant page on the leak site is currently inaccessible, the specific content of the claim remains unverified.

The listing names no specific data types that have been compromised.

About Feng Chia University

Feng Chia University is a prominent private university located in Taichung, Taiwan. It offers a wide range of undergraduate and graduate degree programs in fields such as engineering, business, and social sciences.

Potential risks and implications

This incident may pose a risk of exposure for student and staff data within the university. Such breaches targeting educational institutions could potentially lead to identity theft and targeted phishing campaigns. When sensitive information is compromised, attackers often use the stolen data to conduct more sophisticated social engineering attacks against the individuals involved.

The institution may face legal obligations under Taiwan's data protection regulations following such an incident. The accuracy of the claims made by the nova group and the actual scope of any potential data leak remain unverified. Information about the nova group itself is limited, and their specific operational methods remain unclear.

In the broader context of cybersecurity, ransomware leak sites are used by threat actors to pressure victims through a method often referred to as double extortion. In these scenarios, attackers not only encrypt an organization's data but also threaten to release it publicly to increase the pressure to pay. For educational institutions, which hold vast amounts of personal and academic information, these threats are particularly significant. Organizations in this sector often focus on defensive measures such as robust data encryption, regular backups, and comprehensive employee training to mitigate the risks of such attacks.

Summary of the situation

• Target: Feng Chia University
• Threat Actor: nova
• Claimed Date: June 19, 2025
• Status: Unverified due to inaccessible leak site