Formosa Chang allegedly targeted by nova ransomware group

• Ransomware group: nova
• Country: Taiwan
• Sector: Hospitality
• Announcement date: April 28, 2025

Nova group claims data leak involving Formosa Chang

The ransomware group known as nova has announced the alleged leak of data belonging to Formosa Chang. According to the group's announcement on their leak site, the data breach involves a significant volume of information, though specific details regarding the exact nature of the files remain unconfirmed.

The group claims to have obtained the data following a cyberattack that is said to have occurred on March 30, 2025. Following the initial breach, the group states that the data was made available through their dedicated leak site on April 16, 2025. The announcement, which was officially posted on April 28, 2025, identifies the targeted institution as operating within the food services sector.

Details of the alleged data breach

While the group has publicized the existence of the stolen information, the specifics of the content are limited. Based on the information provided by the threat actor, the following details have been identified:

• The total size of the claimed data is 50 GB.

Beyond the total volume of the data, the listing provides no detailed information regarding the specific types of data leaked. There is no information available regarding the specific file count or the amount of a ransom demand. In many modern ransomware campaigns, groups utilize a tactic known as double extortion, where they not only encrypt an organization's systems but also steal sensitive data to threaten the victim with public disclosure. This method is used to increase pressure on the target to pay the ransom.

About Formosa Chang

Formosa Chang is a popular restaurant chain based in Taiwan, best known for its traditional braised pork rice (lu rou fan). Operating since the 1950s, the company is a prominent representative of Taiwanese cuisine. As a long-standing entity in the hospitality and food services sector, the organization holds a significant presence in the region's culinary landscape.

Potential impact and organizational risks

This alleged leak may pose risks to the institution's operational continuity and the privacy of its customer data. Depending on the content of the leaked data, the institution may face challenges regarding compliance with data protection regulations in Taiwan. The publication of such data could lead to secondary risks for employees and customers, including identity theft or targeted phishing attacks.

Public information regarding the nova group is limited; it is assessed that the group attempts to pressure institutions through such methods. For organizations in the hospitality and food services sector, maintaining robust cybersecurity postures is essential to mitigate these risks. Common defensive steps for organizations facing such threats include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular employee training to recognize phishing attempts.

Furthermore, organizations must be prepared to manage the legal and regulatory implications of a data breach. This involves having a clear incident response plan and ensuring that data protection protocols are strictly followed to minimize the impact on both the business and its stakeholders. The threat of data disclosure remains a primary driver for modern ransomware groups, making the protection of sensitive information a critical priority for companies across all sectors.