Ransomware Group: NOVA

VICTIM NAME: LCM Construção e Comércio S/A

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the NOVA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak pertains to a construction company based in Brazil, known as LCM Construção e Comércio S/A. The incident was publicly disclosed on July 11, 2025, with the attack date also recorded as July 11, 2025. The breach involved the compromise of the company’s internal systems, potentially exposing technical and operational information. The leak page indicates the presence of leaked data, although specific files or sensitive details are not publicly disclosed. The targeted industry focuses on engineering construction solutions emphasizing sustainability and cost efficiency, which is vital for the company’s commitment to high-quality service delivery. The leak URL suggests access to secure, encrypted content, but no explicit PII or confidential internal data is revealed in the summary. The site includes visual content such as screenshots of internal documents, potentially illustrating the extent of the breach and leaked information. This incident underscores the cybersecurity risks faced by the construction sector, especially those investing in sustainable engineering projects within Brazil.**