Skip to content
Cyber Extortion Group n0n Targets 38 Maritime Companies with Data Leak Threat

Cyber Extortion Group n0n Targets 38 Maritime Companies with Data Leak Threat

First seen 14 Oct 2026, 17:34 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 14, 2026 at 17:35 UTC
  • •n0n has threatened 38 maritime organizations with data leaks unless ransoms are paid.
  • •Ransom demands range from $2.4 million to $14 million, payable in Bitcoin.
  • •No organizations have confirmed a breach, and the claims of data theft remain unverified.

The cyber extortion group n0n has threatened 38 shipping and port organizations with data leaks unless multimillion-dollar ransoms are paid by October 19. The affected entities include container terminals, shipping lines, and logistics firms across 18 countries, with South Korea having the highest number of listings. Cybersecurity firm SOCRadar reported that the data claimed to be stolen includes electronic data interchange (EDI) messages, container manifests, and vessel schedules. None of the organizations have publicly confirmed a breach, and the claims remain unverified. The ransom demands range from $2.4 million to $14 million, payable in Bitcoin. SOCRadar noted that the datasets appear to be narrowly focused, suggesting a potential common point of entry rather than separate intrusions. The group has set a countdown on its leak site to pressure victims into compliance. The situation is reminiscent of previous mass exploitation campaigns but lacks direct evidence linking n0n to those incidents.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-12
n0n publishes list of targeted organizations
The cyber extortion group n0n added 38 maritime companies to its dark web leak site, threatening data leaks.
Theloadstar
2026-10-14
Reports of ransom demands emerge
Cybersecurity firm SOCRadar disclosed ransom demands ranging from $2.4 million to $14 million for the targeted organizations.
Splash247

More articles in this cluster (3)

Following this threat?

Track BNCT in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (29)

1 / 4

Common questions

Which companies are affected?
The affected companies include 38 maritime organizations, such as shipping lines and port operators across 18 countries.
What data is claimed to be stolen?
n0n claims to possess EDI messages, container manifests, vessel schedules, and other sensitive documents.
What should affected companies do?
Affected companies should assess their security posture, verify the claims, and consider engaging cybersecurity experts for further investigation.