ShapeCorp listed on nova ransomware leak site

• Ransomware group: nova
• Country: United States
• Sector: Manufacturing
• Announcement date: October 11, 2025

ShapeCorp targeted by nova ransomware group

ShapeCorp, a prominent player in the automotive engineering and manufacturing sector, has been listed on a ransomware leak site by a threat actor group known as nova. The listing, announced on October 11, 2025, suggests a significant data breach targeting the organization's proprietary information. In many modern ransomware attacks, threat actors employ a tactic known as double extortion, where they not only encrypt an organization's systems but also exfiltrate sensitive data to use as leverage during ransom negotiations.

Details of the alleged data theft

The nova group has published data they claim belongs to ShapeCorp on their leak site. According to the threat actor, a tree sample of the stolen data was provided on November 11, 2025. The group alleges that they have successfully extracted proprietary engineering and production data from the organization. While the specific volume of data or the exact amount of files stolen has not been disclosed by the group, the nature of the claimed theft points toward highly sensitive technical and corporate assets.

The data types allegedly involved in this breach include a wide range of critical business and technical information:

• Engineering design files
• Marketing and presentation assets
• CAD files
• Mechanical designs
• CNC programs
• Project documentation
• Automation data
• Brand media
• Financial records
• Production records
• Quality assurance records

About ShapeCorp

Shape Corp. is a global engineering and manufacturing company that develops crash management systems and body structure solutions for the automotive industry. The company specializes in producing lightweight and innovative automotive components using high-strength steel, aluminum extrusion, and injection molding technologies.

Potential impact and industry risks

This alleged leak may pose significant risks to the organization's intellectual property and trade secrets. The presence of data related to major supply chain partners such as Ford, General Motors, and Jaguar Land Rover could trigger secondary risks and contractual obligations. Because the organization is a US-based entity, state-level data privacy laws and potential regulatory compliance processes may be involved.

Information about the nova group remains limited, making it difficult to assess their full capabilities or typical patterns. The nature of the leaked data could weaken the organization's competitive advantage and facilitate targeted phishing attacks against employees or partners. In the manufacturing sector, the theft of CNC programs and mechanical designs is particularly damaging as it compromises the core intellectual property that drives production.

To defend against such threats, organizations in the manufacturing and engineering sectors typically focus on robust access controls, network segmentation to protect industrial control systems, and comprehensive monitoring of data exfiltration. Implementing strict data loss prevention (DLP) measures and ensuring that intellectual property is encrypted both at rest and in transit are also standard defensive strategies to mitigate the impact of potential breaches.