Nova ransomware group lists bassetti-group.com on its leak site

• Ransomware group: Nova
• Country: Germany
• Sector: Technology
• Announcement date: October 29, 2025

Nova ransomware group claims attack on Bassetti Group

The threat actor known as Nova has listed bassetti-group.com on its dedicated leak site. According to the announcement made on October 29, 2025, the group claims to have obtained data belonging to the organization. This listing suggests that an unauthorized access to the institution's digital assets may have occurred.

Ransomware leak sites are platforms used by cybercriminal groups to pressure victims into paying ransoms. When a group fails to receive payment, or as part of their initial extortion strategy, they often publish names of targeted organizations or samples of stolen data to damage the victim's reputation and increase pressure. In this instance, the presence of the Bassetti Group on such a site indicates a significant security incident involving the threat actor Nova.

Details regarding the alleged data breach

Regarding the specific nature of the incident, the threat actor has not provided detailed information. The listing does not specify the volume of data stolen or the exact number of files involved. Furthermore, there is no information provided regarding the specific nature of the alleged leaked data.

The listing names no data types.

About Bassetti Group

BASSETTI Group is a technology company specializing in industrial digitalization. The firm provides technical knowledge management and software solutions designed to assist clients in various industrial processes. For over 30 years, the organization has been assisting customers in transferring their technical heritage to digital environments and enhancing their industrial excellence processes.

Security implications and industry risks

This incident indicates that a security vulnerability may have occurred within the organization's technical infrastructure. Depending on the nature of the leaked data, the organization's trade secrets and intellectual property rights may be at risk. Because the organization is based in Germany, a potential data breach may lead to legal sanctions under the European Union's General Data Protection Regulation (GDPR).

Information about the Nova group is limited; however, given that such groups often prefer double extortion methods, the organization may need to remain vigilant against secondary attack risks. Double extortion is a tactic where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. This dual-layered approach increases the pressure on the victim, as they face both operational downtime and the threat of reputational damage or regulatory fines.

For organizations operating in the technology and industrial digitalization sectors, maintaining robust security postures is critical. Protecting intellectual property and technical heritage is a primary concern, as these assets are often the core value of the business. Common defensive measures for organizations include implementing strict access controls, maintaining comprehensive logging to detect unauthorized access, and ensuring regular patching of technical infrastructure to close vulnerabilities. Additionally, companies must be prepared for the legal complexities that arise from potential data exposure, particularly when operating within jurisdictions governed by strict data protection frameworks like the GDPR.