N0n — Ransomware Profile
N0n is a data extortion operation that WatchGuard first recorded in September 2026 and classifies as a data broker rather than a crypto-ransomware developer. The group runs a Tor-hosted leak site and uses both direct extortion and double extortion against the organisations it names. At the time of WatchGuard's tracker entry it had documented ten claimed victims across eight countries, with the earliest extortion dates falling in mid September 2026.IntelFusions coverage (3)
- Extortion crew N0n unmasks unpaid victims after three days 2026-10-26 · Ransomware
- Extortion crew names 38 port and shipping firms in a day 2026-10-13 · Cyber Incidents
- New extortion crew opens with a ministry and an ISP 2026-09-19 · Ransomware
Recent claimed victims
- Company #132 2026-11-04
- Company #129 2026-11-04
- Company #130 2026-11-04
- Company #131 2026-11-04
- Company #128 2026-11-04
- Company #126 2026-11-03
- Company #124 2026-11-03
- Company #125 2026-11-03
- Company #120 2026-11-03
- Company #118 2026-11-03
- Company #123 2026-11-03
- Company #119 2026-11-03
- Company #121 2026-11-03
- Company #122 2026-11-03
- Company #127 2026-11-03
- Company #115 2026-11-02
- Company #117 2026-11-02
- Company #116 2026-11-02
- Company #114 2026-11-02
- Company #113 2026-11-02
- Digital Triumph 2026-10-31
- Minutes Quick Services 2026-10-30
- Company #112 2026-10-28
- Company #111 2026-10-27
- Ingelectus Innovative Electrical Solutions S.L. 2026-10-26
Vendor research
- n0n Ransomware (Ransomware Tracker) WatchGuard Technologies