Medidores Industriales y Medicos SA de CV Listed by nova Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On November 15, 2025, the ransomware group nova listed Medidores Industriales y Medicos SA de CV on its leak site. The listing states that internal files were exfiltrated during a ransomware attack on the Mexican company. The number of individuals whose information may be involved remains unknown, as does any confirmation that the data has been published or used elsewhere.

Incidents of this kind matter because the organisation works with medical and industrial instrumentation, including equipment used in nuclear medicine. Files taken from such a firm can contain operational records, client information, and technical details whose exposure carries practical consequences for patients, laboratories, and industrial clients even when the exact contents are not yet public.

Breaking down the breach

The only confirmed detail is the listing itself. No date of the intrusion, no volume of data, and no description of the access method have been released by the company or by investigators. The entry on the group’s site claims that files were removed, but provides no further technical information. Public records do not show any statement from Medidores Industriales y Medicos SA de CV confirming or disputing the claim.

The group behind it: nova

Nova is a ransomware operation that has appeared on leak sites since at least 2024. Like similar groups, it typically gains access through remote services or stolen credentials, deploys encryption, and then lists victim names while threatening to release stolen material. The group’s listings are presented as claims rather than independently verified events; some organisations later confirm incidents, while others do not comment. No additional statements from nova about this particular victim have been recorded beyond the initial listing.

Who is Medidores Industriales y Medicos SA de CV?

The company, also referred to as MYIMSA, supplies and services instrumentation for industrial and medical use, with a focus on nuclear-medicine applications. Its work includes haemoglobin and urine analysers, calibration services, and sample-processing systems that require high precision. Organisations in this sector routinely maintain records of client facilities, equipment configurations, maintenance logs, and, in medical contexts, data linked to diagnostic processes.

What was likely exposed

The listing refers only to “internal files.” No inventory of file types or data categories has been published. Companies handling medical and industrial instrumentation commonly store customer contact details, equipment serial numbers, calibration certificates, service histories, and internal correspondence. Whether any of these categories, or more sensitive records such as patient-linked results, were among the exfiltrated material is not confirmed.

Why it matters

Exposure of internal operational files can reveal supply chains, equipment settings, and client relationships that competitors or malicious actors might exploit. In the medical segment, any records tied to diagnostic equipment carry additional weight because they may intersect with regulated health information. For the organisation, the incident adds the cost of investigation, potential regulatory scrutiny, and the need to reassure clients that services remain reliable.

Were you affected?

Individuals or organisations that have done business with Medidores Industriales y Medicos SA de CV have no public way to confirm exposure from the listing alone. A practical first step is to monitor official communications from the company. Running a free exposure scan of your email address against known breach data can show whether the address has appeared in previously published datasets, though it will not detect files that remain non-public.

AICompiled with AI assistance from public sources and published under our editorial standards.