Sunass

Sunass was compromised in a ransomware attack attributed to nova in June 2026. The organization, operating in the Not Found sector in PE, was added to the group's data leak site as part of an extortion campaign.

nova operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

SUNASS is a public regulatory body established by Law Decree No. 25965, with legal personality and administrative, functional, technical, economic, and financial autonomy. The organization focuses on regulating and overseeing water supply and sanitation services in Peru. Its intended clients include service providers in rural areas and small cities, as well as the general public seeking information and assistance regarding water and sanitation services. SUNASS also engages in educational programs and campaigns to promote water conservation and proper sanitation practices - Nova Provide tree and samples from stolen data to the company when its get in touch with support department.