Nova ransomware group lists ​​​​bettininformatica - suporteon on its leak site

• Ransomware group: Nova
• Country: Brazil
• Sector: Technology
• Announcement date: April 28, 2025

Nova ransomware group claims data breach at Bettin Soluções em Informática

The Nova ransomware group has officially listed the Brazilian technology firm Bettin Soluções em Informática on its leak site. According to an announcement made by the threat actors, the organization has allegedly been compromised, resulting in a significant data breach. The group claims to have exfiltrated a substantial amount of sensitive information, targeting the operational and client-related data of the company.

Details of the alleged attack

The threat actor known as Nova published a post on April 28, 2025, regarding the breach. In this announcement, the group claims to have obtained a total of 15 GB of data belonging to the organization. While the announcement was made in late April, the group asserts that the actual attack took place on April 16, 2025. This timeline suggests a period of undetected presence within the network prior to the public disclosure on the leak site.

Ransomware groups often utilize a tactic known as double extortion. In these scenarios, attackers do not merely encrypt a company's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to leak the stolen information on a public platform, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential records. In this instance, the Nova group has moved to the leak phase by publishing the target's name on their platform.

Claimed stolen data types

The information allegedly stolen by the Nova group is diverse, spanning various file formats and sensitive categories. The group claims that the stolen content includes a wide array of documents and media files. Specifically, the leaked data is said to consist of:

• Payment records
• Customer information
• Employee information
• Transaction records
• Configuration files
• WhatsApp files
• Secret reports
• Certificates
• PDF files
• XLSX files
• DOC files
• Images
• Videos

About Bettin Soluções em Informática

Bettin Soluções em Informática is a technology company based in Marília, Brazil. The firm provides a variety of IT services, including computer maintenance and various other technical solutions designed to support its clients' digital needs.

Potential impact and organizational risks

This alleged data breach could have significant implications for the organization's operational continuity and the trust established with its client base. The exposure of personal and financial data carries inherent risks, particularly regarding legal compliance. Given that the company is based in Brazil, the breach could lead to legal consequences under the regulations set forth by the LGPD. Such frameworks are designed to protect personal data and impose strict requirements on how organizations handle, store, and protect sensitive information.

Beyond the immediate legal and operational concerns, there are secondary risks associated with the leak of customer and employee data. Such information is highly valuable to other cybercriminals and could be utilized for identity theft or targeted phishing campaigns. In phishing attacks, criminals use stolen details to craft highly convincing messages to trick individuals into revealing even more sensitive information or performing unauthorized transactions.

For organizations in the technology sector, such incidents highlight the necessity of robust cybersecurity postures. Common defensive steps often include implementing multi-factor authentication, maintaining offline backups, and conducting regular security awareness training for employees. Furthermore, when a breach is suspected, organizations typically conduct forensic investigations to determine the full scope of the incident and identify the entry point used by the attackers. Notifying affected parties is also a critical step in managing the aftermath of a data exposure. At this time, public information regarding the Nova group remains limited, leaving their specific methods and motivations uncertain.