Pere Claver grup Listed by nova Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target organisations that hold sensitive operational and personal records, using leak-site postings as pressure after data theft. In this climate, a listing that names a social-care and healthcare provider draws attention because the sector routinely manages confidential client and staff information.

On 28 March 2025 the ransomware group nova listed Pere Claver grup, claiming that internal files had been exfiltrated and leaked. The number of people affected remains unknown, and public detail beyond the group’s own statement is limited. The incident matters because any confirmed exposure of internal material from a care organisation can create lasting risks for individuals and for the continuity of services.

What happened

According to the available record, Pere Claver grup was listed by the nova ransomware group on 28 March 2025. The group stated that data had been leaked and added the remark “shame on you and all who work with you.” The listing characterises the material as internal files obtained in a ransomware attack. No independent confirmation of the intrusion method, the precise date of the attack, the volume of data, or the number of individuals affected has been made public. Those details remain undisclosed.

The group behind it: nova

Nova is a ransomware operation that has appeared in public reporting as a double-extortion actor: after encrypting systems it also claims to steal data and threatens to publish it on a dedicated leak site if payment is not made. Like other groups in this category, it typically posts victim names, sample files or screenshots, and countdown timers to increase pressure. Public knowledge of its earlier activity shows a pattern of opportunistic targeting across multiple sectors rather than a single industry focus. In the present case the group claims that Pere Claver grup’s internal files were exfiltrated and subsequently leaked; that claim has not been independently verified in the material available here.

About Pere Claver grup

Pere Claver grup is a Spanish organisation active in mental-health care, social services and related community support, primarily in the Barcelona area. Entities of this type routinely hold clinical notes, social-work records, staff personnel files, administrative correspondence and operational documents. Because the work involves vulnerable adults and families, a breach is consequential: it can affect trust in care relationships, expose private medical or social histories, and disrupt day-to-day service delivery if systems or records are compromised. No public statement from the organisation itself is included in the facts supplied for this account.

The information in question

The only description given is “internal files exfiltrated in a ransomware attack.” Exact data types, file counts and whether personal identifiers of clients or staff are present have not been disclosed. Organisations in the mental-health and social-care sector typically maintain clinical documentation, case notes, contact details, employment records and internal administrative material. Until further confirmation appears, it is not possible to state which of those categories, if any, were among the files the group claims to hold.

What's at stake

For individuals whose information may be involved, the practical risks include unwanted contact, identity misuse, or the distress of having sensitive personal or medical details circulate. For the organisation the stakes include potential regulatory scrutiny, the cost of investigation and remediation, and possible interruption of care services. Because the scale remains unknown, the full extent of these risks cannot yet be quantified.

• Unknown number of people potentially affected
• Claimed exposure limited to “internal files”
• No public confirmation of encryption, ransom demand or recovery status
• Possible secondary risks of phishing or social-engineering that exploit any leaked material

Were you affected?

If you have been a client, employee or partner of Pere Claver grup, monitor account statements and any unexpected communications that reference the organisation. Change passwords on related services, enable multi-factor authentication where available, and treat unsolicited requests for personal information with caution. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. Official updates, if issued by the organisation or by Spanish data-protection authorities, should be regarded as the authoritative source for next steps.

AICompiled with AI assistance from public sources and published under our editorial standards.