Skip to content
Ransomware

FMZ Tecnologia em Sistemas listed on nova ransomware leak site

Brazilian software company FMZ Tecnologia em Sistemas has been listed on the leak site of the ransomware group known as nova.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: nova
  • Country: Brazil
  • Sector: Technology
  • Announcement date: July 18, 2026

The Brazilian software company FMZ Tecnologia em Sistemas has been listed on the leak site of the ransomware group known as nova. The group claims to have gained access to the organization's data, marking a potential security incident for the technology firm.

The claims made by nova

The nova group listed FMZ Tecnologia em Sistemas on its leak platform on July 18, 2026. According to the group's announcement, they have successfully gained access to the organization's data. However, the provided screenshot associated with this listing does not contain any data samples or ransom demands. This lack of immediate evidence is common in the early stages of a ransomware leak site announcement, where groups may list a target to build pressure before releasing specific details or negotiating terms.

Ransomware leak sites are platforms used by cybercriminals to exert pressure on victims through a tactic known as double extortion. In these scenarios, attackers not only encrypt an organization's systems to disrupt operations but also threaten to publish sensitive information on these public websites if a ransom is not paid. This method aims to maximize the impact of the attack by threatening the victim's reputation and legal standing.

Details regarding the alleged data breach

At this stage, there is no information regarding the nature of the leaked or threatened data. The screenshot provided by the group displays a generic error message from the Ransomware.live platform rather than specific file details. Furthermore, the listing does not specify the volume of data involved or the total number of files that have been compromised. The listing names no data types.

About FMZ Tecnologia em Sistemas

FMZ Tecnologia em Sistemas is a Brazilian technology company that develops software solutions for the publishing industry. The company's flagship product, HORUS, is an ERP system designed to manage inventory, sales, and royalties for publishers, bookstores, and distributors. Because the company provides essential enterprise resource planning tools, its operational integrity is vital to the publishing supply chain.

Potential implications and industry risks

Public information about the nova group is limited. Because FMZ Tecnologia em Sistemas is an ERP software developer, a potential data breach could lead to supply chain risks. When a software provider is targeted, the security of their customers—who rely on their software for core business functions—can be indirectly threatened. This creates a ripple effect where a single breach can impact multiple downstream organizations.

Under the LGPD regulations in Brazil, the organization may face data breach notification obligations. The exposure of customer data or trade secrets could negatively impact the organization's reputation and operational processes. Secondary risks may include the potential use of leaked data in identity theft or targeted phishing attacks. To defend against such threats, organizations in the technology and software sectors often implement defensive steps such as multi-factor authentication, regular security audits, and robust encryption for data at rest and in transit.

Summary of risks identified

  • Supply chain risk: Potential impact on the publishers and distributors using the HORUS ERP system.
  • Regulatory risk: Potential obligations under Brazil's LGPD.
  • Reputational risk: Possible damage to the organization's standing due to the exposure of trade secrets or customer data.
  • Secondary attack vectors: Risk of identity theft or targeted phishing using leaked information.
From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories