Desert Micro, a Jacksonville, Florida software and internet services provider (DesertMicro.net) reported a ransomware incident attributed to the nova threat actor, claiming attackers accessed and exfiltrated large volumes of customer data including invoices, storage records, backup and document data, and credit card/payment billing information from the company and related services. The claim states nova would provide a sample “tree” of stolen data to the company’s support team upon contact, resulting in impact to the United States. #UnitedStates
Incident Details
- Victim: Desert Micro
- Sector: Technology
- Country:
- Actor: nova
- Source: http://novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion/desert-micro
- Discovered: 2026-06-19T15:00:48.058971+00:00
- Published: 2026-06-19T15:00:30.296257+00:00
Information
- Software and internet company based in Jacksonville, Florida, with 25–100 employees
- Stolen data included large amounts of customer information from the company’s software services
- Exposed records included curbside waste company invoices, storage data, credit card details, payment billing documents, databases, and backups
- Related companies mentioned include Foothills Sanitation, Green Environmental, Inland Service, QC, and FusionSite
- Nova offered to provide a tree and samples of the stolen data if the company contacted support

Disclaimer: This post is based on public claims made by the ransomware group "nova". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.