Universidad Nacional de Mar del Plata Listed by nova Ransomware Group

On July 20, 2026, the Universidad Nacional de Mar del Plata appeared on the leak site operated by the nova Ransomware Group. The listing states that internal files were exfiltrated during a ransomware attack on the Argentine public university, which serves thousands of students, faculty members, and administrative staff across undergraduate, postgraduate, and distance-learning programs.

Details in the Leak-Site Listing

The nova leak site, accessible via the onion address http://pifk3xu3vad6cuxsjll4qjomyaaaoyvnyqppro75pazadzctrrvpdnyd.onion/universidad-nacional-de-mar-del-plata, claims successful data theft from the institution. The disclosure indicates that internal files were taken but does not specify the volume of records, the exact file types, or the number of individuals whose information is contained in the material. No ransom demand figure or payment deadline is published on the listing itself. The university has not yet issued a public breach notification quantifying affected records or detailing the precise data categories involved.

Why This Matters for You and Your Family

Even when a breach originates at a university, the consequences reach far beyond campus. Students, alumni, parents, and nearby residents often share personal details with such institutions — names, dates of birth, national identification numbers, contact information, and sometimes financial records for tuition or scholarship programs. If your data or a family member’s data was among the internal files, it can surface in unexpected places months or years later. Public reporting on similar incidents shows that university breaches frequently expose information that fuels both identity theft and targeted scams against younger adults and their parents.

The Doxxing and Identity-Chain Risks

Stolen internal files rarely remain isolated. Attackers or subsequent buyers can combine university records with other leaked datasets to build detailed profiles. An email address tied to your studies or a child’s enrollment can link to gaming accounts, social-media handles, and home addresses. These identity chains allow doxxing that escalates quickly from leaked documents to harassment, account takeovers, or fraudulent loan applications. Credential leaks of this nature are especially dangerous for gaming accounts belonging to you or your children, because the same passwords or recovery emails are often reused across personal and academic services.

Nova Ransomware Group’s Known Track Record

Public reporting attributes nova as a relatively new ransomware operation that emerged in late 2024. The group has targeted organizations across education, healthcare, and local government sectors, typically gaining initial access through phishing or exploited remote-desktop services. Once inside, nova exfiltrates data before encrypting systems and then posts samples on its leak site when victims do not pay. The group’s playbook emphasizes steady pressure through partial data releases rather than immediate mass publication, a tactic designed to encourage negotiation while still inflicting reputational damage. The Universidad Nacional de Mar del Plata listing fits this established pattern.

What to do

• Run a DoxxScan to map every link between your emails, student IDs, phone numbers, and real-world identity so you can see the full exposure chain.
• Enable continuous DoxxScan monitoring across 15.4B+ breach records and 100+ platforms; the next leak that touches your family will be flagged within hours rather than months.
• Rotate any password you ever used at the university anywhere else it is reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same address or recovery details.
• Let remediation specialists handle ongoing takedown requests for any exposed personal documents or broker listings that appear after this incident.

The breach of Universidad Nacional de Mar del Plata underscores how quickly academic data can feed larger identity-compromise campaigns. Acting promptly limits the window attackers have to exploit stolen records. DoxxScan by GalaxyWarden delivers continuous monitoring across 15.4 billion breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts at risk from cascading credential leaks.