Epcatalogs Company Listed by nova Ransomware Group

On June 29, 2025, the nova Ransomware Group listed EPCATALOGS on its leak site, claiming that internal files had been exfiltrated from the company during a ransomware attack. EPCATALOGS provides electronic spare part catalogs, workshop manuals, and diagnostic software used by automotive repair shops, heavy machinery dealers, and individual mechanics worldwide. If you or your family have ever purchased parts, downloaded manuals, or created accounts on their platform, your contact details and potentially more may now sit in files controlled by the attackers.

What's Publicly Reported from Reporting

Public reporting indicates the nova Ransomware Group added EPCATALOGS to its public leak site on June 29, 2025. The company specializes in technical documentation for cars and heavy equipment. Available reporting describes the incident as a ransomware attack in which internal files were successfully exfiltrated. The exact number of people affected remains unknown, and the specific types of data inside the leaked files have not been publicly detailed beyond the broad category of internal files.

Why This Matters for You and Your Family

When a company that holds customer records suffers a breach, the fallout rarely stops at the corporate perimeter. Repair shops, fleet operators, and ordinary car owners routinely supply names, addresses, phone numbers, email addresses, and payment details to access manuals or order parts. If those records were part of the exfiltrated files, attackers can sell or publish them, leading to spam, phishing, or identity theft that lands directly in your inbox or on your family’s devices. Credential leaks like this one often cascade into account takeovers elsewhere because many people reuse the same email-and-password combination across services.

Children who use family email addresses to register for online games or forums tied to automotive hobbies are especially exposed. A single leaked record can link a parent’s identity to a child’s gaming handle, opening the door to harassment or further data harvesting.

The Doxxing and Identity-Chain Implications

Ransomware groups rarely limit themselves to one dataset. Once internal files leave a company’s control, they can be cross-referenced with other breaches to build detailed profiles. A spare-parts customer record might contain an email that also appears in a gaming breach, a fitness app, or a school parent portal. These connections create identity chains that transform isolated data points into full doxxing packages containing home addresses, phone numbers, and family relationships. Public reporting shows this pattern repeating across dozens of recent incidents: initial access leads to bulk exfiltration, followed by selective publication designed to pressure victims or attract secondary buyers on dark-web marketplaces.

Nova Ransomware Group’s Known Track Record

Public reporting attributes the group’s emergence to late 2024. Since then nova has listed multiple companies across manufacturing, technology, and professional services sectors. Its typical playbook begins with initial access through phishing or exploited remote desktop credentials, followed by deployment of ransomware, exfiltration of internal files, and finally publication on its leak site when ransom demands go unpaid. The group’s extortion style combines data publication with threats of additional leaks, a pattern seen in earlier incidents where customer and employee records were gradually released in batches to increase pressure.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what this claimed breach may have exposed.
• Rotate the password you used at EPCATALOGS anywhere else it is reused and switch on two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which frequently chain back to the same addresses and emails used for automotive purchases.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to chase every copy of your information yourself.

The EPCATALOGS breach is a reminder that even specialized service providers can become gateways to personal exposure. Taking concrete steps now limits how far attackers can travel down the identity chain that begins with this incident. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Starting that process today turns a reactive breach notification into a controlled defense for you and your family.