Nova ransomware group claims data breach against meralmanisa

• Ransomware group: Nova
• Country: Türkiye
• Sector: Manufacturing
• Announcement date: July 19, 2026

Nova ransomware group claims data breach against meralmanisa

The threat group known as Nova has listed data allegedly belonging to meralmanisa on their leak site. The group claims to have targeted the organization on July 19, 2026, and asserts that they have successfully exfiltrated a volume of 1.5 GB of data.

Details of the alleged attack

According to the announcement published by the Nova group, the organization has been compromised. The group's post alleges that they have gained unauthorized access to sensitive information and have exfiltrated specific datasets from the company's systems. In their public statement, the group claims that they may be willing to provide samples of the stolen data to the organization, provided that the company contacts their designated support department.

It is important to note that while the group has made these claims, the provided screenshots associated with the leak do not offer any verifiable information to confirm the actual content of the data or the validity of the breach. At this stage, the information remains an allegation made by the threat actor.

Alleged data types and volume

The Nova group claims to have stolen a total of 1.5 GB of information. Based on the group's announcement, the stolen data is said to include the following types of information:

• Sales data
• Secret documents

As previously noted, the group has not provided specific details regarding the exact file count or the specific nature of the documents beyond these general categories. Furthermore, no ransom demand has been publicly disclosed by the group in relation to this specific claim.

About meralmanisa

MER-AL was established in Turkey in 2005 and specializes in the production of cast filters, rim pallets, and rim pallet covers for the automotive industry. It is one of the world's leading manufacturers of cast filters specifically used in aluminum wheel production.

Potential risks and industry implications

The alleged leak of 1.5 GB of data poses significant risks to the organization. If the claims made by the Nova group are accurate, the exposure of sales data and secret documents could jeopardize the company's trade secrets and sensitive operational data. Such a breach can negatively impact a company's competitive advantage in the manufacturing sector.

From a regulatory perspective, a data breach of this nature may trigger mandatory notification obligations under frameworks such as the Personal Data Protection Law (KVKK). Beyond the immediate regulatory concerns, there is a secondary risk involving social engineering; leaked documents can potentially be utilized by threat actors to conduct highly targeted phishing attacks against employees or business partners.

In the broader context of cybersecurity, this incident highlights the trend of double extortion, where ransomware groups not only encrypt systems but also steal data to pressure victims into paying. Organizations facing such threats are often advised to review their data security protocols, enhance their monitoring capabilities, and initiate relevant legal procedures to mitigate the impact of the breach. Publicly available information regarding the Nova group remains limited, making it difficult to attribute the attack or predict future movements by the actor.