Bandung Listed by nova Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On June 14, 2026, the ransomware group nova listed Bandung on its leak site. The organization affected is Balai Besar POM di Bandung, an Indonesian regulatory body responsible for supervising food and drug safety. The listing states that internal files were exfiltrated during a ransomware attack. No information has been released on the number of people affected, the volume of data involved, or the precise timing and method of the intrusion.

What happened

The incident came to public notice through nova's leak-site posting on June 14, 2026. The post identifies Balai Besar POM di Bandung as the target and asserts that internal files were removed from its systems. No independent confirmation of the data theft or its scope has been published. The number of individuals potentially affected remains unknown, and the organization has not issued a public statement detailing the event.

Inside nova

Nova is a ransomware operation that maintains a leak site to pressure victims. The group typically lists organizations after encrypting systems and claims to have copied data beforehand. When contacted by a listed entity, nova has been observed supplying directory listings and sample files as evidence of access. The current listing for Bandung follows this pattern, with the group stating it will provide such materials upon request.

About Bandung

Balai Besar POM di Bandung functions as a regional office of Indonesia's national food and drug authority. It conducts regulatory oversight of manufacturers, importers, and distributors, issues certifications for good distribution and production practices, and performs laboratory testing of food and pharmaceutical products. The agency also handles public inquiries related to product safety and regulatory compliance.

The information in question

The listing refers only to “internal files” without further specification. The exact categories of data removed have not been disclosed. Organizations of this type routinely process regulatory submissions, inspection records, certification documentation, laboratory results, and contact details for manufacturers and importers. Whether any of these categories are present in the exfiltrated material cannot be confirmed from available information.

The real-world impact

Exposure of internal regulatory files could affect the confidentiality of inspection findings and commercial information held by the agency. Individuals or companies whose records appear in those files may face secondary risks such as targeted inquiries or reputational exposure. For the organization itself, the incident adds to operational and compliance burdens typical of ransomware events involving government-linked entities.

If your data was in this claimed breach

Monitor official statements from Balai Besar POM di Bandung for any further details on the scope of the incident. Review account statements and correspondence from the agency for unexpected activity. Individuals can check whether their email address appears in known public breach datasets through a free exposure scan offered by established breach-notification services.

AICompiled with AI assistance from public sources and published under our editorial standards.