La Financière d'Orion (finorion)
Attack Intelligence
La Financière d'Orion (finorion) was compromised in a ransomware attack attributed to nova in July 2026. The organization, operating in the Financial Services sector in France, was added to the group's data leak site as part of an extortion campaign.
nova operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Since 2009, we have been helping to create a privileged relationship between wealth professionals and their clients. The wealth of our experience allows us to deploy innovative, coherent financial engineering levers that are perfectly tailored to your aspirations and objectives - Nova have 20GB of clients documents data and company finance informations, for example convestion ERES.pdf, secrets is here, Contact us for more details, Nova Provide tree and samples from stolen data to the company when its get in touch with support department.