Ransomware needs a way in. Stolen credentials are the cheapest one.

National Health Insurance Management Authority Ransomware Attack

nhima.co.zmRansomed

novaGroup

KenyaCountry

Dec 5, 2025Discovered

Overview

View group profile

Domain

nhima.co.zm

Industry

Healthcare

Country

Kenya

Discovered

10 months ago

Attack date

Dec 5, 2025

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

nova

Total victims

136

First seen

Sep 2025

Last seen

Jul 2026

Group status

active

Sophistication

Impact score

Threat level

2.8/10

Aggressiveness5/10

Lethality0.2/10

Criticality3.3/10

Status breakdown

Data Leaked5.1%7

Claimed

this victim

94.9%129

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Healthcare

Known target sector

Country

Kenya

Frequently targeted country

Other victims

View all (136)

Same group · nova

Group activity

Monthly attacks · nova

136

total · avg 12.4/mo