The threat actor nova has claimed to have encrypted data from Castilla, a consumer services company based in Soria, Castille and Leon, Spain, affecting its operations. The incident potentially impacts Spain. #Spain

Incident Details

  • Victim: Castilla
  • Country:
  • Actor: nova
  • Source: http://pifk3xu3vad6cuxsjll4qjomyaaaoyvnyqppro75pazadzctrrvpdnyd.onion/#
  • Discovered: 2025-11-02 17:12:41.587011
  • Published: 2025-11-02 17:12:06.939680

Information

  • Castilla is a company operating in the Consumer Services industry.
  • It employs between 5 to 9 people.
  • The company’s revenue ranges from 1 million to 5 million.
  • Headquartered in Soria, Castille and Leon, Spain.

Disclaimer: This post is based on public claims made by the ransomware group "nova". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live