Skip to content
Ransomware

Tèrra Aventura listed on nova ransomware leak site

Tèrra Aventura has been listed on a leak site by the ransomware group known as nova.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: nova
  • Country: Portugal
  • Sector: Hospitality
  • Announcement date: July 21, 2026

The hospitality organization Tèrra Aventura has been listed on a leak site by the ransomware group known as nova. This announcement, which appeared on July 21, 2026, marks a potential data breach involving the platform.

Details of the claim

The nova group officially announced Tèrra Aventura on their dedicated leak site on July 21, 2026. According to the group's announcement, they claim that they will only provide proofs and samples of the alleged stolen data if the organization contacts their support department directly. Information regarding this specific ransomware group remains limited in the public domain, making it difficult to ascertain their full operational profile or historical patterns.

Ransomware groups often utilize leak sites to exert pressure on their victims. These sites serve as a public gallery where groups post the names of organizations they have successfully compromised. By listing a target, the group aims to increase the pressure on the victim to meet their demands. This tactic is a core component of modern cyber extortion, where the threat of public exposure is used as leverage during negotiations.

Information regarding the alleged leak

At this time, the specific nature of the data allegedly leaked has not been specified by the attackers. Furthermore, the announcement provided by the group does not include any screenshots to corroborate their claims. The listing names no specific data types that have been compromised.

In many ransomware incidents, the lack of immediate information regarding the volume or type of data can create significant uncertainty for the targeted organization. When attackers withhold specific details, it often serves as a psychological tactic to increase anxiety during the negotiation phase. Without verified samples or a clear inventory of the stolen information, the full scope of the impact remains unknown to the public and the organization.

About Tèrra Aventura

Tèrra Aventura is a free, app-based treasure hunt game offered in the Nouvelle-Aquitaine region of France. The platform is designed to engage users with local culture and nature. Users explore these elements by solving riddles, following specific walking routes, and finding hidden geocaches throughout the region.

Risk assessment and implications

The claim made by the nova group may pose a significant risk to the security of the organization's user data. Depending on the content of the alleged data, legal processes under the General Data Protection Regulation (GDPR) could be triggered in the event of a personal data breach. This highlights the importance of strict data governance and compliance for organizations handling user information.

If the claim is accurate, users of the organization may become vulnerable to identity theft or targeted phishing attacks. Such attacks often leverage stolen personal information to deceive individuals into revealing sensitive credentials or financial details. This underscores the ongoing threat that data exfiltration poses to individual privacy and security.

Considering that ransomware groups often employ double extortion tactics, the organization may face challenges regarding operational continuity and reputation management. Double extortion involves both the encryption of systems to disrupt operations and the theft of data to threaten public disclosure. This dual-threat approach forces organizations to manage both technical recovery and complex legal and public relations crises simultaneously. Organizations in the hospitality and digital service sectors typically focus on robust backup strategies, continuous monitoring, and comprehensive incident response plans to mitigate these multifaceted risks.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories