The Ministry of Health of Argentina experienced a ransomware attack attributed to the threat actor nova, resulting in the compromise of highly sensitive data for over 2 million patients stored in XLSX files. The breach includes detailed information on vaccination records, demographics, and health conditions, compromising patient privacy and public health data security. #Argentina
Incident Details
- Victim: Ministerio de Salud de la Naci,ón argentina
- Country: AR
- Actor: nova
- Source: http://pifk3xu3vad6cuxsjll4qjomyaaaoyvnyqppro75pazadzctrrvpdnyd.onion/#
- Discovered: 2025-10-12 16:08:45.904277
- Published: 2025-10-12 16:08:04.338085
Information
- The Ministry of Health of Argentina, responsible for public health policy, aimed to strengthen the health system and ensure access to quality services across the country.
- The ministry’s roles include epidemiology, vaccination campaigns, and border health control.
- Since September 30, 2024, Mario Lugones has served as the Minister of Health, succeeding Mario Russo.
- The data compromised include highly sensitive information for over 2 million patients, stored in XLSX files.
- The files contain detailed records such as application date, month, province, department, locality, vaccine, condition, age range, registration delay, sex, dose type, quantity, and more.
- Samples of the data are not provided due to privacy concerns, but the files are organized into three folders with all files in XLSX format.
- Contact me to access the organized data files or for further assistance.

Disclaimer: This post is based on public claims made by the ransomware group "nova". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.