Trevi listed on nova ransomware leak site

• Ransomware group: nova
• Country: Italy
• Sector: Manufacturing
• Announcement date: June 9, 2026

Italian electronics company Trevi targeted by nova ransomware group

The Italian consumer electronics company Trevi has been listed on the leak site of the ransomware group known as nova. According to the announcement made on the group's platform, the incident is reported to have occurred on June 9, 2026. The threat actor claims that samples of the allegedly stolen data can be provided to the company if they contact the support department.

Details of the alleged attack

The group identified as nova has listed the Trevi organization on its leak platform. This type of activity is common in modern cybercrime, where ransomware groups utilize leak sites to pressure victims. In many cases, these groups employ a tactic known as double extortion, where they not only encrypt an organization's systems but also threaten to release sensitive information on public forums to increase the pressure for ransom payment.

Regarding the specifics of the incident, no specific details regarding the nature of the allegedly leaked data have been provided. Furthermore, the screenshot content provided by the group displays only a technical error message, providing no visual confirmation of the stolen files. No information was provided regarding the size of the data, the number of files involved, or the specific ransom demand.

Organization profile

Trevi S.p.A. is an Italian consumer electronics company. It operates in the design and distribution of audio systems, small home appliances, and various electronic devices.

Risk assessment and implications

This incident may pose a risk to the organization's operational continuity. The alleged data breach could trigger secondary risks such as identity theft or targeted phishing attacks against the company's customers and employees. Because the threat actor has claimed to possess data, the potential for follow-on social engineering attacks increases significantly.

As an Italy-based organization, a potential data breach may lead to legal and administrative sanctions under the GDPR. Organizations operating within the European Union must navigate complex regulatory frameworks when sensitive information is compromised. The legal implications of such breaches often involve mandatory reporting requirements and significant oversight from data protection authorities.

Information regarding this group is limited; therefore, a definitive assessment of the group's methods and motivations cannot be made. In general, organizations in the manufacturing and consumer electronics sectors can take several defensive steps to mitigate such risks, including implementing robust backup solutions, enforcing multi-factor authentication, and maintaining rigorous patch management protocols to close vulnerabilities that threat actors often exploit.