lpgroup.pt Listed by nova Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On June 24, 2026, the ransomware group nova listed lpgroup.pt on its leak site and stated that internal files had been exfiltrated from the Portuguese organisation. Public information on the number of people affected, the volume of data, or the precise timeline of the intrusion remains undisclosed. The incident forms part of a continuing pattern in which ransomware operators publish victim names after data is removed from targeted networks. Such listings do not, by themselves, confirm the scope or sensitivity of the material involved.

Inside the incident

Available reporting indicates only that nova claims to have taken internal files during a ransomware operation against lpgroup.pt. No official statement from the organisation, no confirmed count of records, and no verified sample of the material have been released to the public. The date the intrusion began, the method of initial access, and whether encryption was also deployed are not stated in the available facts.

The group behind it: nova

Nova is a ransomware operation that has appeared on leak sites since at least 2023. Public records of its activity show the group typically uses double-extortion tactics: data is copied before encryption, and the group then lists the victim on a Tor-hosted site to pressure payment. Earlier listings have involved organisations in manufacturing, logistics, and professional services. The group’s claims about any specific victim, including lpgroup.pt, remain unverified beyond the listing itself.

Who is lpgroup.pt?

LP Group is a Portuguese company established in 2006 that designs and delivers construction projects in the commercial, logistics, and service sectors. Public descriptions note that it has completed roughly one million square metres of built space, often involving technically complex facilities. Entities of this type routinely maintain records relating to clients, suppliers, project specifications, and internal operations.

What data was at risk

The only detail released is that internal files were allegedly exfiltrated. The precise categories of information contained in those files have not been confirmed. Organisations in the construction and project-management sector commonly store documents that include contractual terms, technical drawings, correspondence with clients and subcontractors, and employee or financial records; whether any of these were present in the exfiltrated material is not known.

Why it matters

Exposure of internal project files can reveal commercial relationships, pricing structures, and technical details that competitors or other parties might exploit. For individuals whose information appears in such files, the main concerns are potential misuse of contact details or contractual data rather than large-scale identity theft. The organisation faces possible reputational and operational consequences while it investigates and responds.

If your data was in this claimed breach

Individuals can take the following initial steps while waiting for any official notification:

• Monitor email and postal addresses associated with any projects involving lpgroup.pt for unusual activity.
• Review bank and credit statements for transactions that do not match known activity.
• Run a free exposure scan of their email address against known breach data sets to check for prior appearances.

Further actions should be guided by any statements the organisation may issue once its investigation concludes.

AICompiled with AI assistance from public sources and published under our editorial standards.