Hoy Construction, a commercial construction management firm based in Virginia, suffered a ransomware claim from the nova threat actor, which allegedly involved providing tree and samples from stolen data to the company once they contacted the support department. The demand is associated with impacting the organization in the United States #UnitedStates
Incident Details
- Victim: Hoy Construction
- Sector: Construction
- Country:
- Actor: nova
- Source: http://novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion/hoy-construction
- Discovered: 2026-05-22T19:25:41.950225+00:00
- Published: 2026-05-22T00:00:00+00:00
Information
- Since 1933, the company has specialized in commercial construction management for commercial, industrial, and institutional facilities in Hampton Roads, VA.
- As a 100% employee-owned company, it emphasizes a design-build approach, preconstruction services, and open-book transparency.
- Its experienced team works with owners and architects to manage costs and schedules while delivering high-quality, durable buildings.
- The company is dedicated to building strong partnerships and maintaining accountability and communication throughout the construction process.
- Nova claimed it would provide tree and samples from stolen data when the company contacts the support department.

Disclaimer: This post is based on public claims made by the ransomware group "nova". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.