Softseba listed on nova ransomware leak site

• Ransomware group: nova
• Country: Bangladesh
• Sector: Technology
• Announcement date: May 21, 2026

The technology company Softseba has been listed on the leak site of the ransomware group known as nova. The threat actor claims to have gained access to the organization's systems, marking a new incident involving a specialized software provider.

The claimed attack event

On May 21, 2026, the nova group listed Softseba on its leak platform. According to the announcement made by the group, they have successfully breached the organization's infrastructure. While the listing appeared on the group's platform, the specific methods used to gain access have not been disclosed. Publicly available information regarding the motivations and specific operational tactics of the nova group remains limited, making it difficult to ascertain the full context of this specific threat actor's involvement in the incident.

Ransomware attacks often follow a pattern where threat actors attempt to gain unauthorized access to a network to exfiltrate sensitive information. Once the data is stolen, the attackers frequently use leak sites to pressure the victim into paying a ransom. This tactic is often referred to as double extortion, where the threat actor threatens to release the stolen data publicly if their demands are not met. In such scenarios, the visibility of the organization on a leak site serves as a public notification of the alleged breach.

Information regarding the leaked data

At this time, the listing does not provide specific details regarding the nature or content of the data that has allegedly been compromised. The group has not shared any information regarding the specific files or the volume of data involved in the breach. Furthermore, the screenshot provided by the group does not offer any details about the content of the files.

The listing names no specific data types.

Potential secondary risks and implications

The lack of information regarding the stolen data makes it impossible to determine the exact scope of the incident. However, depending on the type of data allegedly leaked, secondary risks for customers and business partners may be observed, particularly in the form of identity theft or targeted phishing attacks. When sensitive information is exposed, it can be used by malicious actors to conduct more sophisticated social engineering campaigns against the organization's clients or partners.

About Softseba

Softseba is a software development company specializing in web development, mobile app development, cloud computing, and artificial intelligence. It provides customized software solutions to businesses of all sizes.

Assessment and organizational impact

This situation may cause disruptions in Softseba's operational processes and could create a negative impact on corporate reputation. For organizations operating in the technology sector, such incidents highlight the critical importance of robust cybersecurity frameworks. Because the organization is based in Bangladesh, legal processes may be triggered within the framework of local data protection regulations following the claim of a data breach.

Since there is insufficient data regarding the group's methods and motivations, the scope and ultimate objective of the attack remain uncertain. In general, organizations facing such threats often implement defensive steps such as enhancing endpoint detection and response capabilities, enforcing multi-factor authentication across all services, and maintaining rigorous backup protocols to ensure business continuity. The uncertainty surrounding the attacker's goal remains a significant factor in assessing the overall impact of the claim made by the nova group.