The nova ransomware threat actor targeted the University of Valencia in Spain, claiming access to sensitive and potentially embarrassing personal files, including students’ and children’s photos hosted on the university servers. The actor reportedly offered to negotiate after contact, providing proof in the form of stolen data samples, impacting #Spain
Incident Details
- Victim: University of Valencia
- Sector: Education
- Country: ES
- Actor: nova
- Source: http://novadmrkp4vbk2padk5t6pbxolndceuc7hrcq4mjaoyed6nxsqiuzyyd.onion/university-of-valencia
- Discovered: 2026-05-23T12:54:23.824614+00:00
- Published: 2026-05-23T00:00:00+00:00
Information
- University of Valencia is a university located in the Spanish city of Valencia, founded in 1499, with around 55,000 students.
- It is one of the oldest surviving universities in Spain, the oldest in the Valencian Community, and one of Spain’s leading academic institutions.
- Most courses are taught in Spanish, with some also available in Valencian and English.
- The stolen data reportedly includes sensitive personal information, including kids’ photos, student records, and staff-related files, which could be embarrassing for those involved.
- The attackers claim they will discuss the handling of the kids’ photos with their management team and are offering to provide a tree and samples of the stolen data when contacted through support.
Disclaimer: This post is based on public claims made by the ransomware group "nova". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.