Ransomware victim disclosure
← All victimsNeubox
Claimed by nova · listed 8 hours ago
Status timeline
- Listed
May 21, 2026
- Data leaked
At a glance
- Group
- nova
- Status
- Data leaked
- Sector
- Technology
- Listed on leak site
- May 21, 2026
About the victim
AI dossier — public-source company profileNeubox is listed as the victim name but appears to be a placeholder or aggregator label. The leak post references a mass compromise of approximately 60+ Mexican websites across diverse sectors (cleaning services, medical practices, event planning, real estate, food service, business consulting, construction, education). No single coherent company profile emerges.
Attack summary
Severity: medium — Mass compromise of 60+ websites across multiple sectors with claimed exfiltration of databases and source code; however, no proof files, screenshots, or sample data are presented in the post. The threat is credible given the volume and specificity of domains, but unverified. Operational disruption (sites down) is stated but not independently confirmed.The nova group claims to have compromised multiple websites, stating that affected sites are down and threatening to leak source code, documentation, databases, and database administration interfaces (phpmyadmin). The post provides a list of affected domains but no technical proof or sample data.
Data the group says was taken
AI dossier — extracted from the leak post- website source code
- documentation
- databases
- phpmyadmin access
- business data (inferred)
What the group claims
the following websites is down, their data will be leaked, source codes, docs, databases, phpmyadmin and more 511producciones.com acerosbeta.com advancedaestheticcare.com advancedfootcarergv.com advancedwoundcarergv.com dreduardoalvarez.com echoview.com.mx ellugarcitogastronomico.com empresadelimpiezaencdmx.com empresadelimpiezaenguadalajara.com inventario.ellugarcitogastronomico.com korticalx.com laamatistaeventos.com lascruceseventos.com lumabusiness.com persapartesmetalicas.com pos.ellugarcitogastronomico.com prestaeventos.com.mx puertasparavivienda.com rensomexico.com arkinmexico.com.mx empresadelimpiezaenleon.com misiondefundadores.com riggingmexico.com cacexconsultores.com.mx empresadelimpiezaenmerida.com mynewschoolmexico.com.mx samtrabusiness.com casasyterrenosirem.com empresadelimpiezaenmexico.com opiniones.dreduardoalvarez.com sheigarcia.com cincoonce.com.mx empresadelimpiezaenpuebla.com perforacionesloga.com sistema.vattacademy.com condesareal.com empresadelimpiezaentijuana.com persacontainersdallas.com sistem.mynewschoolmexico.com.mx conexionesymanguerasmonterrey.com empresasloga.com persacontainershouston.com survey.ellugarcitogastronomico.com covasal.com.mx endoscopios.com.mx persacontenedoresjuarez.com tacoselcoreano.com delivery.ellugarcitogastronomico.com eni360.com.mx persacontenedoresqueretaro.com taqueriafundadores.com demmiasocialvenue.com footandanklespecialistrgv.com persacontenedoresramosarizpe.com vattacademy.com destapededrenajeflag.com grupoperforacioneshd.com persacontenedoressanluispotosi.com dicsamonterrey.net igidiamonds.mx persacontenedoressilao.com We ask kind from company to contact for negotiations.
Sources
Source
Indexed 8 hours agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.