The Laxmi Niwas Palace listed on nova ransomware leak site

• Ransomware group: nova
• Country: India
• Sector: Hospitality
• Announcement date: October 23, 2025

The Laxmi Niwas Palace listed on nova ransomware leak site

The Laxmi Niwas Palace, a hospitality entity based in India, has been listed on the leak site associated with the ransomware group known as nova. The group has published an announcement claiming that data belonging to the institution has been compromised. This listing appeared on the group's leak site on October 23, 2025, with the group claiming to have gained access to the institution's digital assets.

Details of the claimed attack

According to the announcement made by the nova group, the organization's digital assets have been accessed. The group's listing appeared on their dedicated leak site on October 23, 2025, and they claim the attack occurred on that same date. This type of activity is characteristic of modern ransomware operations, which often utilize leak sites to pressure victims. In such scenarios, threat actors frequently employ double extortion tactics, where they not only encrypt an organization's systems but also threaten to publish sensitive information on public forums to increase leverage.

While the group has made these claims, it is important to note that the incident is currently based on the group's assertions. The listing serves as a public claim of a successful breach and unauthorized access to the digital infrastructure of the targeted organization.

Information regarding the leaked data

Regarding the specifics of the breach, no information has been provided by the group concerning the nature of the leaked or threatened data. While the screenshot provided by the attackers displays the institution's name and its sector information, no specific details regarding the content of the data are available. The listing names no specific data types.

Potential risks of data exposure

In many ransomware incidents involving the hospitality sector, the exposure of sensitive information can lead to various secondary risks. If a data breach is confirmed, the exposure of hotel guests' personal information could occur. Such an event often leads to increased risks of targeted phishing attacks, where attackers use stolen details to deceive individuals. Furthermore, the exposure of private information can lead to legal consequences under India's data protection regulations.

About The Laxmi Niwas Palace

The Laxmi Niwas Palace is a historic luxury hotel located in Bikaner, India. Built in 1902 for Maharaja Ganga Singh, the property now serves as a popular tourist destination offering accommodation within the former royal palace.

Impact and defensive considerations

This incident may pose a risk to the institution's operational continuity and the privacy of customer data. Beyond the immediate technical disruption, the organization may observe negative impacts on its reputation. For organizations operating in the hospitality sector, maintaining the privacy of guest information is a critical component of trust and operational integrity.

Given that information about the nova group remains limited, organizations facing similar threats are encouraged to take proactive measures. It is advisable for institutions to conduct a comprehensive security audit of their systems to identify vulnerabilities. Additionally, proactively monitoring for potential data leaks and implementing robust security frameworks can help mitigate the impact of such incidents. Defensive strategies often include maintaining offline backups, implementing multi-factor authentication, and ensuring that all digital assets are regularly patched and monitored for unauthorized access.