RADWAG listed on nova ransomware leak site

• Ransomware group: nova
• Country: Poland
• Sector: Manufacturing
• Announcement date: May 19, 2026

A new victim listed on a ransomware leak site

The ransomware group known as nova has published an announcement on its leak site listing the organization RADWAG as a victim. The announcement, which appeared on May 19, 2026, suggests that the manufacturer has been targeted in a cyberattack. While the listing confirms the group's claim of a breach, the specific details regarding the nature of the incident remain limited in the public domain.

Ransomware leak sites are platforms used by cybercriminal groups to pressure victims into paying ransoms. These sites often host lists of compromised organizations to increase visibility and reputational damage. In this instance, the group has officially added RADWAG to its roster of victims, marking a significant development for the organization.

Details of the claims made by nova

According to the announcement published by the group, the threat actor claims to have access to data belonging to the organization. The group has indicated that it may be willing to provide samples of the allegedly stolen data if the organization chooses to contact its support department. This tactic is a hallmark of modern cyber extortion, where attackers use the threat of leaking sensitive information to compel payment.

Publicly available information regarding the group known as nova is currently limited. This lack of transparency regarding the threat actor's identity and operational methods is common in the ransomware landscape, making it difficult for security researchers to attribute the attack or understand the group's specific motivations beyond financial gain. The claim of providing data samples suggests the potential use of double extortion tactics.

Double extortion is a strategy where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information before the encryption occurs. The goal is to threaten the victim with the public release of this data, thereby increasing the pressure to pay the ransom to prevent reputational or legal consequences.

Information regarding the allegedly stolen data

At this stage, no specific details regarding the nature of the allegedly stolen data have been provided by the threat actor. The listing does not specify the types of files or the volume of information involved. Furthermore, a screenshot associated with the announcement indicates that the specific details of the announcement could not be retrieved, leaving the exact scope of the breach unknown.

The listing names no specific data types as being affected by this incident.

About RADWAG

RADWAG is a Poland-based global manufacturer specializing in the production of electronic weighing equipment, balances, and specialized measuring instruments. As a player in the manufacturing sector, the organization provides essential measurement technology to various industrial applications worldwide.

Potential risks and organizational implications

These claims may pose significant risks to the organization's operational processes and commercial reputation. For a company operating within the European Union, a potential data breach could lead to serious legal obligations under the General Data Protection Regulation (GDPR). Compliance with these regulations is critical for maintaining legal standing and protecting the rights of individuals.

The exposure of employee or customer data may lead to secondary risks such as identity theft or targeted phishing attacks. When sensitive information is leaked, attackers often use it to conduct more sophisticated social engineering campaigns against the victims or their business partners.

In such scenarios, it may be necessary for organizations to conduct a comprehensive security audit to identify the entry point and the extent of the intrusion. Evaluating notification processes in accordance with relevant regulations is also a vital step in managing the aftermath of a potential breach. Organizations in the manufacturing sector often focus on hardening their industrial control systems and securing their supply chain to mitigate these types of threats.