AV Services Barcelona Listed by nova Ransomware Group

On September 25, 2025, the nova Ransomware Group listed AV Services Barcelona on its leak site after exfiltrating 100 GB of the company’s internal files. The Barcelona-based audiovisual services provider, which supports corporate events, hybrid conferences, streaming productions, and equipment rentals across Barcelona and Madrid, had customer contracts, invoices, contact lists, and operational documents stolen in the attack. Anyone whose name, email, phone number, or payment details appear in those records is now at risk of identity theft, phishing, or doxxing.

What's Publicly Reported from Reporting

Public reporting indicates that nova actors gained access to AV Services Barcelona’s systems and removed 100 GB of internal data. The group published proof packets and a countdown timer on its dark-web leak site, a standard step before public release or auction of the stolen files. No confirmed victim count has been released, but the nature of the business means the exposed data likely includes details belonging to corporate clients, event attendees, suppliers, and employees. The breach involves traditional ransomware tactics: initial access, data exfiltration, and extortion pressure rather than pure encryption.

Why This Matters for You and Your Family

When a vendor like an audiovisual company is breached, your personal information can leak even if you never directly signed up for their service. If you or your family attended a corporate event, wedding, conference, or product launch handled by AV Services Barcelona in the past 15 years, your contact details, signatures, or payment records may now sit in a ransomware repository. Customer contracts and invoices often contain full names, addresses, email addresses, phone numbers, and sometimes passport copies for international clients. Once that information reaches criminal marketplaces, it fuels phishing campaigns, account takeover attempts, and long-term identity fraud that can affect your credit, taxes, and even your children’s records.

The Doxxing and Identity-Chain Implications

Stolen internal files rarely stop at one company. A single leaked email or phone number can be cross-referenced with gaming accounts, social-media handles, and family addresses to build a complete identity chain. Public reporting shows that ransomware groups and their downstream buyers routinely sell these bundles on forums where doxxers search for “fullz” packages. Credential leaks of this kind frequently cascade into gaming account takeovers, especially for children who reuse usernames or email addresses tied to family domains. The exposed data creates persistent risk because once it is out, it cannot be recalled.

Nova Ransomware Group Track Record

Public reporting attributes the attack to the nova Ransomware Group, which emerged in early 2024. The group has targeted mid-sized businesses across Europe and North America, with notable prior victims in the hospitality, manufacturing, and professional-services sectors. Its typical playbook involves stealthy initial access through phishing or exploited remote-desktop services, followed by exfiltration of sensitive files, then dual extortion: threatening both data publication and, in some cases, contact with the victim’s customers. The group maintains a leak site where it posts proof files and countdown timers, a pattern repeated with AV Services Barcelona.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup to remove what you can.
• Rotate any password you used at AV Services Barcelona or any related vendor account, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing your own accounts.

The incident is a reminder that your information is only as safe as the vendors you trust. Taking concrete steps now limits how far this claimed breach can follow you or your family. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects online handles to real identities, and hands-on remediation by specialists who manage takedowns for both adults and children’s gaming accounts. Start your DoxxScan trial today to close the gaps this attack has opened.