Tele-Fonika Cable Americas targeted by nova ransomware group

• Ransomware group: nova
• Country: United States
• Sector: Technology
• Announcement date: December 9, 2025

Nova ransomware group claims data breach at Tele-Fonika Cable Americas

The threat actor known as nova has officially listed Tele-Fonika Cable Americas on its ransomware leak site. In a recent announcement, the group claimed to have successfully exfiltrated a significant volume of data belonging to the organization. According to the claims made by the threat actor, the stolen dataset consists of approximately 10 GB of information.

Ransomware attacks often involve a tactic known as double extortion. In such scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive data before the encryption phase. The threat actors then threaten to leak this stolen information on public forums or dedicated leak sites if the ransom demands are not met. This approach increases the pressure on the victim organization by threatening their reputation and legal standing.

Details of the alleged attack and stolen data

The incident was announced on December 9, 2025, with the group claiming the attack occurred on the same day. The threat actor asserts that the breach resulted in the theft of various critical documents and records. While the group has posted the claim on their leak site, no screenshots of the stolen data have been provided to verify the contents of the breach.

The information allegedly exfiltrated by the nova group includes a wide range of sensitive business and personal records. The specific types of data mentioned in the claim include:

• Financial records
• Customer information
• Partner information
• Employee IDs
• Invoices

The presence of such diverse data types suggests that the attackers may have gained access to various internal systems, ranging from financial management tools to human resources databases and customer relationship management platforms.

About Tele-Fonika Cable Americas

Tele-Fonika Cable Americas is part of the TFKable Group, which is a global company specializing in the production of high and extra-high voltage cables. The organization provides essential solutions for the energy sector, focusing on the supply of cable systems for renewable energy projects and offshore wind farms.

Given the critical nature of the energy sector and the specialized infrastructure provided by companies like Tele-Fonika Cable Americas, they serve as vital components within the global energy supply chain. Disruptions or data compromises involving such entities can have ripple effects across the various industries they support.

Potential impact and industry implications

This incident may expose both employees and customers of Tele-Fonika Cable Americas to significant risks, such as identity theft, due to the nature of the allegedly leaked data. Furthermore, the leaked financial data and invoices could potentially be utilized by malicious actors for secondary attacks or highly targeted phishing campaigns against the organization.

Because the organization is located in the United States, this event may trigger specific data breach notification requirements under relevant state laws and federal regulations. Organizations operating in the technology and energy sectors must be aware of these legal obligations to mitigate legal and regulatory consequences.

From a broader perspective, the organization's reputation within the global supply chain may be negatively impacted by these allegations. In sectors where reliability and security are paramount, a data breach can damage the trust established with business partners and clients. While information regarding the 'nova' group remains limited, the incident highlights the ongoing risks faced by global industrial suppliers.

To defend against such threats, organizations typically implement a multi-layered security strategy. This includes robust access controls, continuous monitoring of network traffic, and regular security awareness training for employees to recognize phishing attempts. Additionally, maintaining offline backups and implementing strict data encryption protocols can help mitigate the impact of both data exfiltration and ransomware encryption.