My English House academy Listed by nova Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

My English House academy, the operator of a network of English language schools in Spain, appeared on a leak site maintained by the nova ransomware group on May 27, 2026. The listing states that internal files were removed from the organization during a ransomware incident. No information has been released on the number of individuals affected or the volume of data involved. The incident is known only through the group’s public claim. No independent confirmation of the data access or its scope has been made available.

Breaking down the breach

The only confirmed detail is the date the listing appeared and the description of the data as internal files. The method of initial access, the duration of any unauthorized presence, and whether encryption was also deployed are not stated in the available information. The group indicates it will supply a directory listing and sample files to the organization upon contact, but no further technical details have been published.

Inside nova

Nova is a ransomware operation that maintains a leak site to post names of organizations it claims to have targeted. Like similar groups, it typically exfiltrates data before or during encryption attempts and uses the site to pressure victims into negotiations. Public records show the group has listed entities in multiple countries and sectors, though each listing remains an unverified assertion until corroborated by the affected organization or law-enforcement findings.

Who is My English House academy?

My English House academy runs a franchise-based chain of English-language schools with more than thirty locations in Spain. The company was founded by Carlos Barberá and Arturo Mateu and promotes a proprietary teaching method described as “learning by doing.” Its website, myenglishhouseacademy.com, serves as the public face of the network and likely hosts or connects to systems that manage student enrollment, scheduling, and franchise operations.

The information in question

The listing refers only to “internal files.” No inventory of specific data categories has been released. Organizations of this type commonly store student registration details, contact information, payment records, and staff files, yet the exact contents removed in this case remain unconfirmed.

What's at stake

Until the scope of the exfiltrated material is clarified, the primary concern for individuals is the potential exposure of personal or financial information that language schools routinely collect. For the organization, the incident may affect operational continuity, franchise relationships, and regulatory obligations under Spanish and European data-protection rules. Both outcomes depend on details that have not yet been disclosed.

Were you affected?

Individuals who have enrolled at any My English House location or interacted with its systems can begin by monitoring official statements from the academy. Checking email addresses against known breach databases through a free exposure scan provides one practical step while waiting for further information from the organization.

AICompiled with AI assistance from public sources and published under our editorial standards.