Marpatech targeted in alleged data leak by Nova ransomware group

• Ransomware group: Nova
• Country: Peru
• Sector: Technology
• Announcement date: July 22, 2026

Nova ransomware group claims data breach at Marpatech

The threat group known as Nova has announced a data leak involving the technology firm Marpatech. According to an announcement published on July 22, 2026, the group claims to have successfully gained access to the company's network. This development follows a common pattern observed in modern cyberattacks where threat actors utilize dedicated leak sites to pressure organizations into meeting their demands.

In many such incidents, ransomware groups employ a tactic known as double extortion. In this scenario, attackers do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive information before the encryption process begins. By threatening to publish this stolen data on public forums or specialized leak sites, the attackers increase their leverage, hoping that the threat of reputational damage or regulatory scrutiny will compel the organization to pay a ransom.

Details of the Nova group claim

The Nova group listed data allegedly belonging to Marpatech on their leak site. In their announcement, the threat actor stated that they could provide samples of the stolen data if the company contacts their support department. This offer of samples is a frequent tactic used by ransomware groups to prove the validity of their claims and to demonstrate that they have indeed compromised the target's internal systems.

The announcement was published on July 22, 2026, which coincides with the date the group claims to have carried out the attack. While the group asserts they have successfully breached the network, the specific details regarding the methods used to gain entry remain undisclosed. Information regarding the Nova group itself is limited, and as a result, a definitive assessment of the group's specific technical methods or their underlying motivations cannot be made at this time.

Data and content of the leak

Regarding the specifics of the alleged breach, there is no detailed information regarding the content of the alleged leaked data. At this stage, no screenshots have been provided by the threat actors to verify the nature of the files they claim to possess. Furthermore, the listing names no specific data types or categories of information that have been targeted.

When such leaks occur, the lack of immediate transparency regarding the data content often leaves organizations in a state of uncertainty. Without knowing whether the stolen files consist of intellectual property, employee records, or financial documents, it is difficult to immediately gauge the full scope of the impact. Organizations typically respond to these situations by initiating forensic investigations to determine the extent of the unauthorized access and to identify which specific datasets may have been compromised.

Organization profile: Marpatech

Marpatech is a technology company providing instrumentation and control solutions for the mining and industrial sectors in Latin America. The firm offers technical and commercial support for products from manufacturers such as AMETEK, SOR, and JUMO to clients located in Peru, Argentina, and Colombia.

Potential risks and industry implications

This incident may pose a risk of exposing the company's trade secrets or client information. Depending on the actual content of the leaked data, secondary risks such as identity theft or targeted phishing attacks may arise for the company's employees and clients. Such secondary attacks often follow a breach, where criminals use the stolen information to craft highly convincing social engineering campaigns against the victims.

Furthermore, the alleged data breach could lead to legal processes under the data protection regulations in Peru and other Latin American countries where the company operates. In the modern regulatory landscape, companies are often held to high standards regarding the protection of personal and sensitive data, and failures in security can result in significant legal and compliance challenges.

For organizations operating in the technology and industrial support sectors, maintaining robust security postures is critical. Defensive strategies often include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular network segmentation to limit the lateral movement of attackers. Additionally, continuous monitoring and incident response planning are essential components for mitigating the impact of a potential breach and ensuring a coordinated response to such threats.