[NOVA] – Ransomware Victim: SunMoon university

image

Ransomware Group: NOVA

VICTIM NAME: SunMoon university

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the NOVA Onion Dark Web Tor Blog page.


AI Generated Summary of the Ransomware Leak Page

The ransomware leak originated from an attack targeting Sun Moon University, a private educational institution located in South Korea. The attack was publicly claimed on May 28, 2025, with the leak being discovered the following day. The incident affects the university’s official online portal, which serves as a critical platform for students and staff. Authorities and cybersecurity experts are investigating the breach, which appears to involve sensitive institutional data, although specific details about the compromised content have not been disclosed. The leak underscores the vulnerabilities faced by educational institutions in cyberspace, highlighting the importance of robust cybersecurity measures. No personal or PII data has been publicly shared in the leak, and the attack’s full impact remains under assessment. The leak includes a link to a dark web site for more information, but no direct sensitive data or download links are detailed publicly. The page also includes screenshots, possibly of internal documents or interfaces, suggesting a compromise of operational data. This incident emphasizes the need for ongoing vigilance and data security protocols within the education sector. The attack was claimed by a group called ‘nova,’ and the incident underscores the growing threat landscape for academic organizations worldwide.


A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

To keep up to date follow us on the below channels.