RANSOMWARE VICTIMEDUCATION

University of Gävle

nova📍 Sweden (SE)📅 November 3, 2025
8
same group

Attack Intelligence

University of Gävle was compromised in a ransomware attack attributed to nova in November 2025. The organization, operating in the Education sector in Sweden, was added to the group's data leak site as part of an extortion campaign.

nova operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

University of Gävle is a university college located in Gävle, Sweden. The university was established in 1977 and is currently organized into three academies and nine departments. The university offers around 45 masters- and bachelor's degrees and 800 courses in technology, social- and natural sciences and the humanities. ZoomInfo: https://www.zoominfo.com/c/ga%CC%88vle/1142576926 / Domain: https://www.hig.se/

Other Victims — nova (8)

Quick Facts

CountrySweden (SE)
SectorEducation
Attack DateNov 3, 2025
Intel Sourceransomlook

Threat Group

nova
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.