A ransomware-feed item names SUNASS and nova, but the record is thin enough that the real story is triage, not confirmation.
A public victim listing and a promise of “samples” from stolen data show how modern extortion relies on fear, not just encryption, especially when the target is tied to essential services.