SWISS ROSE Factory listed on nova ransomware leak site

• Ransomware group: nova
• Country: Iran
• Sector: Manufacturing
• Announcement date: November 15, 2025

A new target in the manufacturing sector

The ransomware group known as nova has listed the manufacturing company SWISS ROSE Factory on its leak site. According to the announcement made on November 15, 2025, the group claims to have successfully targeted the organization, initiating a process to leak information related to the company's operations.

This incident follows a common pattern observed in modern cyberattacks, where threat actors use dedicated leak sites to pressure victims. In these scenarios, groups often employ double extortion tactics, where they not only encrypt a victim's systems but also steal sensitive data to threaten its public release. By listing an organization on a public platform, these groups aim to damage the victim's reputation and force compliance with their demands.

The claims made by nova

The nova group has published a leak announcement claiming that they have obtained data belonging to SWISS ROSE Factory. To support their claims, the group has released sample files that are alleged to belong to the company. The group has indicated that they have officially started a leak process regarding the various operations of the organization.

While the group has initiated this public exposure, the specific details regarding the scope of the breach remain limited. The group's motivations and their specific technical capabilities remain uncertain due to the limited amount of public information available regarding their operations.

Data involved in the incident

Regarding the specific content of the leaked information, there is no clear information available at this time. However, it is assessed that the sample files shared by the group may contain the company's operational data.

• Operational data

The listing does not specify the total volume of data stolen or the exact number of files involved. Furthermore, no specific ransom demand has been made public in the current announcement.

About SWISS ROSE Factory

SWISS ROSE Factory is a company operating in the Iraqi market. Established in 2019, the company provides various cleaning and personal care solutions. They produce a wide range of products under the O2 brand, including home care, surface cleaning, fabric care, and personal care products.

Impact and defensive considerations

This incident may have negative impacts on the operational continuity and corporate reputation of SWISS ROSE Factory. If the alleged leaked data contains employee information or trade secrets, the company's supply chain and customer relations could be at risk. Furthermore, the publication of such data may lead the company to be exposed to targeted phishing attacks or secondary extortion attempts.

For organizations operating in the manufacturing sector, such incidents highlight the importance of robust data security protocols. When a breach occurs, it is often advisable for companies to review their security frameworks and evaluate the necessary legal notification processes regarding potential data breaches. Protecting sensitive operational data and trade secrets is critical to maintaining the integrity of the supply chain and protecting customer trust.

Defensive strategies typically involve implementing multi-factor authentication, maintaining offline backups, and conducting regular security audits to identify vulnerabilities before they can be exploited by ransomware groups. As the threat landscape evolves, the ability to detect and respond to unauthorized data access remains a primary concern for industrial and manufacturing entities.