NHIMA (National Health Insurance Management Authority) listed by the Nova ransomware group

Overview

The Nova ransomware group has listed the National Health Insurance Management Authority (NHIMA) of Zambia on its leak site. The authority administers the National Health Insurance Scheme, which provides access to healthcare services and essential medicines for families and individuals. The listing appeared on 5 December 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the authority. The archive is expected to include health insurance member records, contribution data and administrative information.

Risks for affected individuals

• Members' personal and health data may be exposed.
• Contribution records could enable fraud.
• Employees' information may be included.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Members should monitor official channels for statements and be cautious of unsolicited communications. NHIMA should coordinate with Zambian cybersecurity authorities, review affected systems, and inform the public if member data is involved.