Ransomware: nova claims FMZ Tecnologia em Sistemas (BR) — Technology

AI Analysis

On 18 July 2026, a ransomware group known as "nova" claimed responsibility for an attack on FMZ Tecnologia em Sistemas, a Brazilian technology firm. The claim was published on the ransomware.live leak site, which tracks and publicises breach incidents. This event is categorised under the BREACH framework, indicating a confirmed data compromise. While the specific data exfiltrated has not been detailed, such incidents typically involve customer records, internal systems access, or proprietary data.

The primary affected organisation is FMZ Tecnologia em Sistemas, a technology sector company in Brazil. However, this incident signals broader risk for technology firms globally, particularly those providing managed services or software solutions, as they often hold sensitive client data. Compliance teams in the EU should note that if FMZ processes EU personal data, this may trigger notification obligations under GDPR, especially if the breach involves personal data of EU residents.

Compliance teams should immediately verify whether their organisation has any data-sharing or vendor relationships with FMZ or similar Brazilian technology providers. If so, assess whether personal data of EU data subjects is involved and, if yes, report the breach to the relevant supervisory authority within 72 hours. Additionally, review incident response plans and ensure third-party risk management processes are updated to account for ransomware claims published on public leak sites.