Nhà Thành Phố Listed by nova Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
On June 21, 2026, the Nova ransomware group listed Nhà Thành Phố after exfiltrating internal files in a ransomware attack, affecting an undisclosed number of people. Individuals should check whether their data was involved and take appropriate protective steps.
Inside the incident
The incident centers on a listing posted by nova that names Nhà Thành Phố and its domain nhathanhpho.com.vn. The group states that internal files were exfiltrated. No confirmed count of records, timeline of access, or method of initial compromise has been made public. Nova has offered a directory listing and sample files, along with the ability to decrypt one file as a demonstration if the company contacts its support channel.
The group behind it: nova
Nova is a ransomware operator that follows the common pattern of encrypting systems and copying data before demanding payment. The group maintains a leak site where it publishes names of organizations that do not meet its terms. Such actors typically use the threat of data release to increase pressure, though each listing remains an unverified claim until independently confirmed by the victim or investigators.
Nhà Thành Phố and its sector
Nhà Thành Phố operates as an online real estate listing service in Vietnam, run by an individual named Đoàn Vinh. Platforms of this type connect buyers, sellers, and renters and therefore collect contact details, property descriptions, transaction interests, and account information. A breach at such a service can expose data that reflects people’s housing decisions and financial circumstances.
What data was at risk
The only detail released so far is that internal files were taken. The precise categories of information inside those files have not been disclosed. Organizations in the real estate listing sector commonly store user registration data, property inquiries, and communication records, yet the exact contents in this case stay unconfirmed.
The real-world impact
Individuals whose information appears in the exfiltrated files could face follow-on risks such as targeted phishing or misuse of contact details. For the organization, the incident adds operational disruption from any encryption and potential loss of trust among users who shared personal information on the platform. Both outcomes depend on what the files actually contain, which remains undisclosed.
If your data was in this claimed breach
Begin by watching for unusual account activity and consider changing passwords on any real estate or related services you use. Enable multi-factor authentication where available. You can also run a free exposure scan of your email address against known breach data sets to see whether your information has appeared in other incidents.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
AMACCAO Listed by nova Ransomware Groupalejandria.biz Listed by nova Ransomware Grouplpgroup Listed by nova Ransomware Groupalejandria Listed by nova Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the Nhà Thành Phố Listed by nova Ransomware Group →
Publicly posted by nova — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.