Epcatalogs Company Listed by nova Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 29 June 2025, Epcatalogs Company appeared on a listing associated with the nova ransomware group. Public reporting indicates that internal files were claimed to have been taken during a ransomware attack. The number of people whose information may be involved remains unknown, and further technical details have not been released.

For anyone who has dealt with the company—whether as a customer, supplier, employee or partner—the practical concern is straightforward. If personal or business data was among the material taken, it could later be misused for fraud, targeted phishing or competitive harm. Until more is confirmed, the prudent response is to treat the possibility seriously and take basic protective steps.

Inside the incident

According to the available record, Epcatalogs Company was listed by the nova ransomware group on 29 June 2025. The group claims that internal files were exfiltrated as part of a ransomware attack. No figure has been given for the volume of data, the number of systems affected, or the number of individuals whose records may be included. The precise method of initial access, the duration of the intrusion, and whether encryption was also deployed remain undisclosed in public sources.

Because the listing itself is a claim made by the threat actor, independent verification of the full scope has not been established in the material available. Organisations in this position often face pressure to negotiate or to prepare for possible publication of stolen material; whether that occurred here is not stated.

Who is nova?

Nova is a ransomware group that operates in the well-documented pattern of double extortion. Actors associated with the name typically gain access to a network, move laterally to locate valuable data, exfiltrate copies, and then encrypt systems while threatening to release the stolen material if a ransom is not paid. Victims are commonly listed on dedicated leak sites as a means of applying public pressure.

Like other groups of this type, nova has been observed targeting a range of commercial sectors rather than a single industry. Public reporting on its activity emphasises the use of standard ransomware tooling combined with data theft, followed by timed publication threats. Specific claims the group has made about Epcatalogs Company beyond the listing itself are not detailed in the available facts; any further assertions should be treated as unverified until corroborated by independent sources.

Epcatalogs Company and its sector

Epcatalogs Company specialises in electronic spare-part catalogues, workshop manuals and diagnostic software for the automotive and heavy-machinery industries. Businesses of this kind sit at the intersection of technical publishing, aftermarket support and industrial software distribution. They routinely handle detailed product data, customer account information, supplier records and, in many cases, employee and contractor details needed to deliver services.

A breach affecting such an organisation is consequential because the data it holds can be both commercially sensitive and personally identifying. Spare-part and diagnostic material may include proprietary technical content; customer and partner records can contain contact details, purchase histories and contractual information. When these categories of data leave an organisation’s control, the consequences extend beyond the company itself to the wider supply chain and to individuals who interact with it.

The information in question

Public reporting states that internal files were exfiltrated. No further breakdown of file types, databases or record counts has been disclosed. The number of people affected is listed as unknown.

Organisations that produce electronic catalogues, manuals and diagnostic tools typically maintain customer databases, licensing records, employee directories, supplier contracts and technical documentation. Whether any of these categories were among the material taken in this incident remains unconfirmed. Until the company or independent investigators provide a clearer inventory, the exact contents of the claimed exfiltration cannot be stated as fact.

What's at stake

For individuals, the primary risks centre on the possible misuse of personal or contact information. If names, email addresses, phone numbers or account credentials were present in the internal files, those details could be used for phishing campaigns, credential-stuffing attempts or social-engineering attacks that impersonate the company or its partners. Financial or identity-related harm is possible if more sensitive identifiers were included, though that has not been confirmed.

For Epcatalogs Company itself, the exposure of internal files can mean loss of proprietary technical content, disruption of customer trust, and potential regulatory or contractual obligations depending on the jurisdictions and data types involved. Even when personal data is limited, the commercial value of stolen catalogues, manuals or diagnostic material can create lasting competitive and reputational effects. Because the scale remains unknown, both the individual and organisational impact must be assessed cautiously until more information surfaces.

What to do if you're exposed

If you have an existing relationship with Epcatalogs Company—whether as a customer, employee, supplier or partner—begin with ordinary hygiene. Change passwords on any accounts that may have been linked to the company, enable multi-factor authentication wherever it is offered, and treat unexpected emails or calls that reference the firm with extra caution. Monitor financial statements and credit reports for unfamiliar activity over the coming months.

Keep records of any notices you receive from the company and follow official guidance if it is issued. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets; doing so provides an additional, independent signal of whether further monitoring is warranted. Stay alert to updates from the organisation itself, as fuller details may emerge over time.

AICompiled with AI assistance from public sources and published under our editorial standards.