Ministerio de Salud de la Nación argentina data allegedly leaked by nova group

• Ransomware group: nova
• Country: Argentina
• Sector: Government & Defense
• Announcement date: October 12, 2025

Nova group claims to have leaked data from Argentina's Ministry of Health

The ransomware group known as nova has listed data allegedly belonging to the Ministerio de Salud de la Nación argentina on its dedicated leak site. According to the announcement made by the group on October 12, 2025, the breach involves a significant amount of sensitive information. The group claims that the attack occurred on the same day the announcement was posted.

The group asserts that the compromised data is organized within XLSX file structures. While the specific volume of data and the exact number of files have not been disclosed by the attackers, the group claims that the breach impacts a massive number of individuals. Specifically, the group claims that the sensitive information of over 2 million patients has been compromised in this incident.

Details of the alleged data breach

The information allegedly stolen by the nova group is highly sensitive, as it pertains to the personal health records of a vast population. The group claims that the data includes various categories of information that could be used to identify and profile individuals. According to the claims, the dataset contains the following types of information:

• Patient health records
• Vaccination records

The group further specifies that the records include details such as vaccination information, age ranges, gender, application dates, and regional information. This combination of data points suggests a comprehensive overview of patient histories within the national health system.

About the Ministerio de Salud de la Nación argentina

The Ministerio de Salud de la Nación argentina is the government agency responsible for coordinating and overseeing public health policies in the country. Its primary mission is to strengthen the health system in a federal and equitable manner. The agency aims to ensure that the population has consistent access to quality health services across the nation.

Potential impact and security implications

This incident may pose a significant risk to the privacy of public health data in Argentina. The alleged compromise of personal health information could lead to severe consequences for the affected individuals, such as identity theft or targeted phishing attacks. When sensitive medical data is exposed, malicious actors can use the information to craft highly convincing social engineering campaigns against specific targets.

Furthermore, the institution may face administrative and legal proceedings under existing data protection regulations. The legal ramifications of a large-scale data leak often involve significant scrutiny from regulatory bodies and potential litigation from the affected citizens.

Regarding the group involved, information about nova is currently limited. However, it is important to note that ransomware actors typically employ double extortion tactics. In a double extortion scenario, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten the victim with public disclosure unless a ransom is paid. Given this common tactic, it is possible that the institution's operational continuity may also have been affected by this incident.

In the government and defense sector, such incidents highlight the critical importance of robust cybersecurity frameworks. Organizations in this sector often implement defensive measures such as network segmentation, multi-factor authentication, and continuous monitoring to protect sensitive citizen data. Protecting public health infrastructure requires constant vigilance to prevent unauthorized access to large-scale databases containing highly personal information.