Nova (RALord) Claims Responsibility for Ransomware Attack Against the Cisneros Organization
The Nova ransomware group (formerly known as RALord) posted the Cisneros Organization, the Venezuelan-based media and entertainment conglomerate, on its leak site on January 11, 2026, claiming to have accessed its systems and stolen internal business information. Ransomware trackers (ransomware.live and ransomlook.io) classify the victim as being from Venezuela, although its headquarters are currently located in Miami. There has been no official confirmation from the company.
Impact details
Nova/RALord publicly claimed that business information had been stolen. No official confirmation from the victim, independent technical validation, confirmation of encryption, or evidence of an outage has been found.
Classification & severity
- Category
- Malicious code
- Subtype
- Ransomware
- Confidence
- Medium
Xcitium reports that Nova/RALord ransomware has issued a ransom demand against the Cisneros Group; public evidence does not confirm encryption, an outage, or the authenticity of the data.
Severity assessment
Medium- Information impact
- Suspected
- Critical service
- Potential
- Public confidence
- Limited
- Recoverability
- Extended
Timeline
The Nova (RALord) ransomware group posted information about the Cisneros Organization on its leak site, claiming to have compromised its systems and stolen internal business data; trackers classify it as originating from Venezuela.
Ransomware trackers (ransomware.live, ransomlook.io) and security researchers (Xcitium ThreatLabs) publicly record the victim.