ShareP Listed by nova Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target mid-sized technology firms that manage critical urban infrastructure, using data theft and public leak-site listings to pressure victims. In this environment, even smaller operators handling parking and electric-vehicle systems have become attractive targets because their systems sit at the intersection of public services and private data.

On October 16, 2025, the Swiss startup ShareP was listed by the ransomware group nova. Public reporting states that internal files were exfiltrated during a ransomware attack. The number of people affected remains unknown, and further operational details have not been disclosed. The listing itself is a claim by the group and has not been independently confirmed in the available record.

Inside the incident

According to the reported summary, ShareP was listed by nova on October 16, 2025. The only data description provided is that internal files were allegedly exfiltrated in a ransomware attack. No public information confirms the precise date of intrusion, the initial access method, the volume of data taken, or whether systems were encrypted. The number of individuals whose information may have been involved is listed as unknown. Beyond the group’s claim on its leak site and the high-level description of internal-file exfiltration, additional technical or forensic detail has not been made public.

Who is nova?

Nova is a ransomware group that operates in the double-extortion model common among contemporary cybercriminal actors. Such groups typically gain access to corporate networks, exfiltrate data, and then threaten to publish the stolen material on dedicated leak sites if a ransom is not paid. They frequently list victim organizations by name and sometimes release sample files to demonstrate possession of the data. Public reporting on nova’s broader activity shows the same pattern of claiming breaches against companies across multiple sectors and using leak-site postings as leverage. In the present case, the group’s listing of ShareP constitutes an unverified claim; no independent confirmation of the full scope of the intrusion has been released in the available facts.

ShareP and its sector

ShareP is a Swiss startup that supplies a plug-and-play platform intended to digitize and optimize urban parking and electric-vehicle charging infrastructure. Public figures associated with the company indicate approximately 29 employees and annual revenue of roughly 31 million dollars. Organizations of this type typically integrate hardware sensors, software dashboards, payment systems, and municipal or private-operator interfaces. They therefore handle operational data about parking occupancy, charging-session records, user accounts, billing information, and sometimes location or vehicle identifiers. A breach involving such a provider can affect both the company’s internal operations and the municipalities or commercial partners that rely on its services for everyday urban mobility.

What data was at risk

The available facts state only that internal files were exfiltrated. No inventory of specific data categories—such as customer names, payment card details, employee records, or infrastructure configuration files—has been publicly disclosed. Companies operating parking and EV-charging platforms ordinarily maintain databases of user registrations, session logs, billing records, and system-configuration information. Because the precise contents of the exfiltrated files remain unconfirmed, it is not possible to state with certainty which of these categories, if any, were included. The only confirmed description is the high-level reference to internal files taken during the ransomware incident.

What's at stake

For individuals whose information may have been present in the stolen files, the practical risks include potential misuse of account credentials, exposure of payment or contact details, and the possibility of targeted phishing that references legitimate parking or charging activity. For ShareP itself, the incident raises questions of operational continuity, contractual obligations to municipal or commercial partners, and the cost of forensic investigation and system recovery. Because the company sits inside urban infrastructure chains, any disruption or loss of confidence can also affect the reliability of parking and charging services relied upon by cities and drivers. Exact financial or operational impact figures have not been published.

If your data was in this claimed breach

If you have used ShareP’s parking or charging services, treat any unexpected communications that reference those services with caution. Change passwords on related accounts, enable multi-factor authentication where available, and monitor financial statements for unfamiliar charges. Consider placing a fraud alert with credit-reporting agencies if you believe sensitive personal or payment data may have been involved. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach datasets. Because the full contents of the ShareP files remain unconfirmed, these steps are precautionary rather than a response to verified personal exposure.

AICompiled with AI assistance from public sources and published under our editorial standards.