Nhà Thành Phố Listed by nova Ransomware Group

On June 21, 2026, Vietnamese real estate platform nhathanhpho.com.vn appeared on the leak site of the nova Ransomware Group. The operator, individual Đoàn Vinh, runs the site that lets ordinary people buy, sell, and rent homes across Vietnam. Public reporting indicates the attackers exfiltrated internal files and left a sample of stolen data along with a decryption key for one file after the company reached out to their support channel.

Confirmed Details of the Breach

Available reporting describes the incident as a classic ransomware deployment followed by data exfiltration. The nova Ransomware Group listed nhathanhpho.com.vn on its dark-web portal, providing tree structures and sample files as proof. No confirmed victim count has been released, and the precise volume or sensitivity of the internal documents remains unclear from public leak-site information. The platform itself processes personal details typical of real-estate listings, including names, contact information, property addresses, and financial negotiation records that ordinary Vietnamese families would expect to remain private.

Why This Matters for You and Your Family

When a service you used to list or inquire about a home is breached, your personal information can move quickly into the hands of identity thieves, stalkers, or scammers. Real estate records often contain phone numbers, email addresses, national identification numbers, and home addresses — exactly the data needed to impersonate you, open fraudulent accounts, or harass your family. Even if you were only a casual browser on the site, any message you sent or document you uploaded could now sit in an attacker-controlled archive. For families with children, these exposures can also link to school records, social-media handles, or gaming usernames that share the same email or phone number.

The Doxxing and Identity-Chain Risks

Stolen real-estate files rarely stay isolated. Attackers routinely combine them with credential leaks from other breaches to build detailed profiles. A phone number found in one listing can be matched to a gaming account, an email from a forgotten forum, or a child’s username on Roblox or Free Fire. Once these links are mapped, doxxing escalates from simple spam to targeted extortion, swatting, or physical intimidation. Credential leaks like this one cascade into account takeovers across unrelated services, turning a single platform breach into a household-wide privacy disaster.

Nova Ransomware Group’s Known Track Record

Public reporting attributes the nova Ransomware Group with emerging in late 2024 and focusing on mid-sized targets across Asia and Latin America. Notable prior victims include regional healthcare providers, logistics firms, and small e-commerce platforms. Their typical playbook involves initial access through phishing or unpatched remote desktop services, followed by exfiltration of internal documents, deployment of ransomware, and publication of samples on their leak site when payment is refused. The group’s extortion style mixes threats of full data release with offers of “proof” samples, as seen in the nhathanhpho.com.vn case.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, real-estate inquiry accounts, and any connected gaming handles that could be chained together.
• Rotate any password you ever used on nhathanhpho.com.vn and enable 2FA with an authenticator app on every account where that password was reused.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next exposure of your information is caught and acted on within hours rather than months.
• Cover the household with DoxxScan family protection that extends to your children’s gaming accounts, which often become the weakest link in doxxing chains when real names and addresses are already exposed.
• Let DoxxScan remediation specialists handle takedown requests for any data-broker listings that surface after this breach instead of attempting manual removal yourself.

The nhathanhpho.com.vn breach is a reminder that even small, locally run services can expose the everyday details that matter most to your safety. Taking concrete steps now limits how far attackers can travel down the identity chain that begins with this leak. DoxxScan by GalaxyWarden delivers continuous monitoring across 15.4 billion breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.