CYMA
Attack Intelligence
CYMA was compromised in a ransomware attack attributed to nova in January 2026. The organization, operating in an undisclosed sector in Unknown, was added to the group's data leak site as part of an extortion campaign.
nova operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
CYMA Systems has been producing payroll and accounting software solutions since 1980. CYMA's most recent accounting and payroll software suite is CYMA Accounting for Windows which offers solutions for mid-sized business with 200+ employees, PEOs, ASOs, Payroll Services, Directed Services (Fiscal / Employer Agents) Franchises, Staffing, and Nonprofit Organizations.