RANSOMWARE VICTIMMANUFACTURING

URG OEM

urg.co.kr
nova📍 South Korea (KR)📅 May 17, 2026
8
same group

Attack Intelligence

URG OEM was compromised in a ransomware attack attributed to nova in May 2026. The organization, operating in the Manufacturing sector in South Korea, was added to the group's data leak site as part of an extortion campaign.

nova operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

urg.co.kr - URG was founded with a sincere desire to provide solutions for customers facing skin concerns. Starting in 1990 with the launch of Shangpree Spa, the company not only delivered high-quality products to customers but also set a new standard for luxury service in the skincare industry—establishing itself as a leading premium spa brand. Building on over 30 years of tradition and expertise, URG has since launched a variety of skincare brands, gaining recognition both domestically and internationally.

Other Victims — nova (8)

Quick Facts

CountrySouth Korea (KR)
SectorManufacturing
Attack DateMay 17, 2026
Domainurg.co.kr
Intel Sourceransomware.live

Threat Group

nova
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.