RADWAG Listed by nova Ransomware Group

On May 19, 2026, Polish weighing-equipment manufacturer RADWAG appeared on the leak site of the nova Ransomware Group. The company’s internal files were exfiltrated during a ransomware attack, and the attackers have published sample data while offering the full set to RADWAG if it contacts their support department.

Confirmed Details of the Breach

Public reporting indicates that RADWAG.com was listed on the nova leak site hosted at a Tor onion address. The listing states that internal files were stolen. No confirmed total number of affected records has been published, and the precise volume and sensitivity of the data remain unclear from available reporting. The group provided tree and samples of the stolen material and instructed the company to reach its support department for further discussion. The incident follows the typical nova pattern of dual extortion: encrypt systems, exfiltrate data, then threaten public release unless a ransom is paid.

Why This Matters for You and Your Family

Even when the named victim is a business, ordinary customers and employees often bear the consequences. If you have purchased scales, laboratory balances, or industrial weighing equipment from RADWAG, your name, address, phone number, email, or payment details may sit inside the stolen files. The same applies if you or a family member works at the company or any of its suppliers. Once internal documents leave the victim’s control, they can surface on multiple underground forums, turning a corporate breach into dozens of smaller leaks that affect personal lives for years.

The Doxxing and Identity-Chain Risks

Ransomware groups rarely stop at one leak. Stolen spreadsheets frequently contain employee directories, vendor lists, customer invoices, and email correspondence. These records link names to addresses, phone numbers, and sometimes dates of birth. Attackers or opportunistic criminals then chain that information with credentials from earlier breaches, gaming usernames, or social-media handles. The result is a complete identity profile that can be used for account takeovers, SIM-swapping, or targeted harassment. Credential leaks like this one cascade into account takeovers and doxxing chains, which is why protecting both corporate and personal accounts matters.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity so you can see exactly what the RADWAG files may have exposed.
• Rotate any password you used on RADWAG.com or related vendor portals and enable 2FA through an authenticator app instead of SMS.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms so the next time your information appears it is caught within hours rather than months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing day-to-day accounts.

The RADWAG incident is a reminder that ransomware operators continue to target companies whose customer and employee data eventually touches millions of ordinary households. A single corporate breach can quietly feed long-term identity theft and doxxing campaigns. DoxxScan by GalaxyWarden delivers continuous monitoring across 15.4B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full family and household coverage including children’s gaming accounts. Starting that process promptly gives you a practical way to limit the damage from this and future leaks.