strtn.org Listed by nova Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

The listing of strtn.org by the nova ransomware group on December 15, 2025, indicates that internal files were claimed to have been taken during a ransomware incident. The number of individuals affected remains unknown, and no independent confirmation of the data’s contents or volume has been made public. For members and staff of a medical professional society, the exposure of internal records can affect routine operations and personal information held by the organisation.

Inside the incident

The only public record of the event is the group’s listing of strtn.org on its leak site. The entry states that internal files were exfiltrated; no date of the underlying intrusion, no description of the access method, and no figure for the quantity of data have been disclosed. The organisation has not issued a statement confirming or denying the claims.

Inside nova

Nova is a ransomware group that maintains a public leak site to pressure victims after encryption and data removal. Its documented pattern involves initial network access, often through remote services or stolen credentials, followed by file exfiltration and encryption. The group lists organisations on its site when negotiations stall or to publicise claimed breaches. In this case the listing stands as an unverified claim by the group.

Who is strtn.org?

strtn.org is the online presence of the Tunisian Society of Radiology, founded in 1952 by Dr Ali Fourati as the Tunisian Association of Electro-Radiology. The society represents radiologists and related professionals in Tunisia and maintains records typical of a medical membership organisation, including member contact details, professional credentials and administrative correspondence.

The information in question

The listing refers only to “internal files.” No inventory of specific data categories has been released. Organisations of this type commonly store member names, addresses, professional qualifications, payment records and internal correspondence; whether any of these categories were among the claimed files is unconfirmed.

What's at stake

Exposure of internal administrative files can lead to misuse of contact information for targeted phishing or to the release of professional details that members expect to remain within the society. For the organisation, the incident may complicate routine member services and require additional security measures. The absence of confirmed data categories leaves the precise scope of risk unclear.

What to do if you're exposed

Individuals who believe their information may be involved should monitor official communications from the Tunisian Society of Radiology and consider basic account hygiene measures.

• Change passwords for any accounts associated with the society and enable multi-factor authentication where available.
• Review bank and email statements for unusual activity.
• Run a free exposure scan of your email address against known breach data to check for prior appearances.

AICompiled with AI assistance from public sources and published under our editorial standards.