FysioRoadmap targeted by nova ransomware group

• Ransomware group: nova
• Country: Netherlands
• Sector: Healthcare
• Announcement date: September 28, 2025

Nova group claims data breach at FysioRoadmap

The ransomware group known as nova has claimed responsibility for a cyberattack against FysioRoadmap, a healthcare organization based in the Netherlands. According to an announcement made on a leak site on September 28, 2025, the threat actors claim to have successfully exfiltrated a significant amount of data from the company's systems. The attack was reportedly carried out on the same day the announcement was posted.

In modern cyberattack patterns, such as double extortion, threat actors often steal sensitive information before encrypting systems. This allows them to pressure victims by threatening to release private data on public leak sites if a ransom is not paid. While the ransom demand for this specific incident was not disclosed, the group has moved to publicize the breach through their dedicated platform.

Details of the claimed theft

The claims made by the nova group suggest a massive breach of information. The threat actor asserts that they have stolen more than 20,000 documents from the organization's internal systems. The total volume of the exfiltrated data is estimated by the group to be 10 GB.

The group has indicated that instructions regarding contact and the process for data recovery can be found within a readme file located on the desktop of an affected system. The specific contents of the stolen data, as claimed by the attackers, include a variety of highly sensitive information types:

• BSN numbers
• Phone numbers
• Full patient names
• Sick-analyze results
• Images

About FysioRoadmap

FysioRoadmap is a specialized entity within the Monitored Rehab Systems family. The organization provides electronic patient record (EPR) software that is specifically designed to meet the needs of physiotherapy professionals. Beyond its software solutions, the company is also involved in the manufacturing of various hardware equipment used throughout physiotherapy and rehabilitation processes.

Potential impact and industry implications

If the claims made by the nova group are accurate, the breach could lead to significant legal consequences for FysioRoadmap under the General Data Protection Regulation (GDPR) regulations in the European Union. The exposure of highly sensitive medical information and BSN numbers presents severe secondary risks, including the potential for identity theft and the execution of targeted phishing attacks against the affected individuals.

Furthermore, the nature of the data involved suggests that the organization could face substantial reputational damage and operational disruptions. The high sensitivity of medical and patient-related information inherently increases the potential impact of such an incident on both the organization and the individuals whose data was compromised.

For organizations operating within the healthcare sector, such incidents highlight the critical importance of robust cybersecurity frameworks. Protecting sensitive patient data requires continuous monitoring, strict access controls, and comprehensive data encryption strategies. Organizations typically focus on implementing defensive measures such as multi-factor authentication, regular security audits, and employee training to mitigate the risks of unauthorized access and data exfiltration.