Nova ransomware group claims data breach against LTI Services and Larick Towing
The threat group known as Nova claims to have compromised databases belonging to LTI Services and Larick Towing.
- Published
- 2 min read
- 2 min read
- Ransomware group: Nova
- Country: United States
- Sector: Transportation
- Announcement date: May 30, 2026
Nova ransomware group claims to have compromised LTI Services and Larick Towing
The threat actor known as Nova has announced a targeted attack against two entities: LTI Services and Larick Towing. According to an announcement made on the group's leak site on May 30, 2026, the group claims to have successfully compromised the databases belonging to these organizations.
Details of the claimed attack
The Nova group stated that they gained access to the internal databases of both LTI Services and Larick Towing. In their announcement, the group has provided an 11-day window for the organizations to engage in ransom negotiations. To demonstrate the validity of their claims, the group stated they have decrypted two files as proof of their access.
Notably, the group has specified their intent regarding the stolen information. They have stated that they intend to leak only databases rather than the companies' source code. This approach is a common tactic in modern ransomware operations, often referred to as double extortion, where attackers threaten to release sensitive data to pressure victims into paying a ransom.
Data involved in the claim
The leaked data is claimed by the group to consist of database (DB) files. However, the provided screenshot accompanying the announcement does not offer any information that would allow for the verification of the actual content of these files. The listing names no specific data types beyond the claim of database files.
Organization profiles
The targeted entities operate within the transportation sector. LTI Services is a company that specializes in customization, repairs, and aftermarket parts for the heavy-duty trucking industry. Larick Towing is a family-owned business that has been operating since 1978, providing various vehicle transportation and towing services on a nationwide scale.
Analysis and potential impact
Publicly available information regarding the Nova group remains limited. Because the targeted companies are based in the United States, this incident may trigger legal processes under various state-level data privacy laws. The breach of such information can have significant consequences for the organizations involved.
The claim of a database leak poses several risks. First, it may negatively impact the operational continuity of LTI Services and Larick Towing. Second, the exposure of such data could lead to the compromise of customer information. Such leaks can create secondary risks, including the potential for identity theft and the execution of highly targeted phishing attacks against the affected parties.
If the targeted institutions fail to meet the ransom demands set by the group, the threat actor has indicated that the publication of the data on public platforms may occur. In such scenarios, organizations typically face the challenge of managing reputational damage and navigating complex regulatory requirements regarding data breach notifications. Defensive measures for organizations in the transportation and logistics sector often include implementing robust access controls, maintaining offline backups, and conducting regular security audits to mitigate the risk of unauthorized database access.