Novum Energy listed on Global Secret Group leak site

• Ransomware group: Global Secret Group
• Country: United States
• Sector: Energy & Utilities
• Announcement date: July 26, 2026

Global Secret Group claims data theft from Novum Energy

The ransomware group known as Global Secret Group has listed Novum Energy on its dedicated leak site. According to the announcement made on July 26, 2026, the threat actors claim to have successfully compromised the organization's systems and exfiltrated a significant volume of sensitive information.

The details provided by the threat actor suggest a large-scale operation. The group claims to have obtained 842 GB of data, which is reportedly comprised of 971,325 individual files. While the announcement was made in late July, the group alleges that the initial compromise and data theft occurred much earlier, specifically on July 1, 2026.

Ransomware leak sites are platforms used by cybercriminals to exert pressure on victims. In many modern attacks, threat actors employ a tactic known as double extortion. In this scenario, the attackers do not just encrypt an organization's files to disrupt operations; they also steal sensitive data before encryption. This allows them to threaten the public release of the stolen information if the ransom is not paid, creating a secondary layer of leverage against the target organization.

Details of the alleged data breach

The information shared by Global Secret Group includes screenshots intended to prove the validity of their claims. These samples appear to show various file directories, which may indicate the depth of the intrusion into the organization's internal structures. Furthermore, the leaked samples include financial statements and various corporate documents.

While the screenshots provide a glimpse into the nature of the stolen information, the threat actor has not provided detailed information regarding the full scope of the leaked data. The specific contents and the total breadth of the compromised files remain unclear based on the current announcement. The affected data types identified in the claim include:

• Financial data
• Corporate documents

The presence of such data in a leak site environment presents a significant risk to the target. When corporate and financial documents are exposed, it can lead to various secondary threats, such as identity theft or highly targeted phishing attacks directed at employees and business partners.

About Novum Energy

Novum Energy is a company operating in the energy sector. The organization specializes in energy trading, supply chain management, and retail fuel station operations. Headquartered in Texas, USA, the organization focuses on the distribution and logistics of energy products.

Risk assessment and industry implications

This incident highlights the significant risk of exposure for sensitive corporate and financial data within organizations operating in the energy and utilities sector. Because Novum Energy is based in the United States, the potential leak of such data may trigger complex legal processes under relevant state laws and federal regulations.

For organizations in the energy and utilities sector, such incidents underscore the importance of robust cybersecurity frameworks. The sector is often a target due to its critical role in national infrastructure and the high value of its logistical and supply chain data. When a breach occurs, the impact can extend beyond immediate operational disruptions to long-term legal, regulatory, and reputational consequences.

To mitigate the risks associated with such threats, organizations typically focus on several defensive layers. This includes implementing strong access controls to prevent unauthorized movement within a network, maintaining rigorous backup protocols to ensure operational continuity, and conducting regular monitoring to detect anomalous data transfers. Furthermore, because double extortion relies on the threat of data exposure, protecting the confidentiality of sensitive files through encryption and strict data loss prevention (DLP) measures is a critical component of a modern defense strategy.

At this time, information regarding the Global Secret Group remains limited. The group's specific methods, technical capabilities, and underlying motivations remain unclear. As with many such incidents, the focus for the affected organization will likely involve determining the full extent of the compromise and addressing the potential legal and regulatory requirements arising from the exposure of sensitive information.