Skip to content
Back to Blog
low severity September 12, 2026 · 4 min read Unverified claim — what this is

N3ON September 2026 swatting video: does this incident affect you

If you are a customer of N3ON September, here’s what is being claimed, and what it would mean for you.

Streamer N3ON posted his own YouTube video on 11 September 2026 showing police approaching him during a livestream and said he had been swatted. No news outlet independently reported that specific event, and the clip does not newly publish other people’s private details. If you were not there with him, this is not a leak of your information.

— from the group that posted this listing’s own leak-site posting. This is the group’s claim, quoted verbatim; it is not GalaxyWarden’s reporting and has not been independently verified.
N3ON September 2026 swatting video: does this incident affect you

On or immediately before 11 September 2026, livestreamer N3ON and at least one companion were approached by police while streaming in public. He posted the footage himself on the N3ON YouTube channel on 11 September 2026, titled “We Got Swatted..”. That upload is the only source for this specific event. No regulator notice exists, and no established news outlet independently reported it.

Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →

Watch N3ON September

Get alerted the next time N3ON September files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.

We’ll email you only about N3ON September’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.

Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.

In the video he says, “Bro, there's no way we just got swatted while we're wearing this,” then tells the officers, “I'm so sorry to waste y'all's time. Thank you for your service.” Police are visible and audible. The clip does not newly disclose names, addresses, or other personal details. Nobody has disputed the video. N3ON has a documented history of similar incidents in 2024 and 2026.

This was a fake emergency call about a streamer, not a file with your name in it

A “confirmed security incident” plus the word swatting is easy to misread as a dumped list of homes, or as a sign that police might come to you next. That is not what this video shows.

Exposure Pack · one payment
The full list, and what to lock in ten minutes.
  • Every indexed leak tied to your address — all of them, named and dated
  • A deeper search of collected breach data — the kinds of your information it holds, where it finds you
  • What this kind of incident typically exposes
  • A ten-minute lock list written for this kind of organisation
One payment. Nothing renews, and no account is created. Emailed to you within a minute.

What happened here is that someone who already knew or could infer where N3ON was livestreaming sent police to that spot. The footage is his own recording of officers arriving. It is not a roster of ordinary viewers, Kick users, or YouTube accounts. It does not newly publish an address book, phone list, or ID numbers. Entertainment sites covered some of his earlier swattings; they did not cover this one. There is no government advisory because a single harassment call of this kind is not a consumer data breach.

If you saw this mentioned and wondered whether you are “in” it, the honest read is that you are not. You are not in the “we” on that livestream unless you were physically there. Treating this clip as if it were a leaked database would create a kind of fear the facts do not support.

What to actually expect

  • You should not expect police at your door, a victim letter, or a bank or credit alert that cites this 11 September 2026 video.
  • You should not expect YouTube, Kick, or any government agency to post a list of affected people. No such list has been published, and the What's Publicly Reported do not describe one.
  • You may see recap posts reusing N3ON’s own upload. Copies of that clip are not evidence that your private records were allegedly stolen.
  • If you were not the streamer and were not with him during that livestream, nothing confirmed here indicates you were the target of the 911 call.

What you can and cannot fix

What cannot be undone is the public video. N3ON posted it himself, and anyone can still watch police approach him. The fake call already happened. Those things cannot be recalled. What has not been shown is a new public dump of home addresses or national ID numbers belonging to the general public. Your address is not “out” because of this clip when the clip did not newly disclose it.

Nobody can run your name through a search and honestly tell you whether you “were in” this incident. This was not that kind of event. A clean result would not prove you were safe from it, and a hit would not prove you were part of it.

If this scare still makes you want less of yourself on the open web, the useful work is not “removing the swatting,” which you cannot do. It is shrinking the extra detail that people-search sites attach to a name. A bare public mention is often harmless on its own. It becomes a problem when those directories add relatives, phone numbers, employers, and previous addresses next to it. Unlike a video you do not control, many of those directory listings can actually be taken down.

  • Do not freeze credit, replace IDs, or change every password on the strength of this clip alone. Those steps do not match what was confirmed.
  • Do not pay anyone who claims they can erase this incident from the internet or confirm you were a victim of it. The video stays up if he leaves it up, and there is no public victim file to scrub.
  • If you want a practical privacy step, opt out of people-search listings that publish relatives, phones, jobs, and old addresses. That is the layer that can still be reduced.
  • If police ever come to your home because of a fake emergency you did not cause, that is a local crime report for your own non-emergency police number. It is separate from this YouTube video.

What the free scan actually returns

Sample resultyou@email.comIllustrative — not a real person

Found on people-search siteswe remove these

These listings are live, public, and legal to remove — and removing them is what we do.

value redacted in this sampleage, relatives, address historySpokeo
value redacted in this samplephone, household, property recordsBeenVerified
value redacted in this sample580 companies checked

Found in breach recordsverifiedreported — unverified

Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.

verifiedvalue redacted in this samplepassword + phone · 2024telecom breach
unverifiedvalue redacted in this sampleclaimed in ransomware listing · 2026leak-site claim

Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.

Check your exposure
N3ON September is one listing. Your email is probably in others.
We can’t confirm any single incident against the sources we search, so we won’t pretend to. What we can show you is your own exposure — your email against 13.1B+ leaked records and the sites that publish your address. About 15 seconds. No account, no card.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

Report details & sourcing

Severity Low contact details only, none of them permanent
Disclosed September 12, 2026
Last reviewed September 12, 2026
Affected Unconfirmed
Data exposed None newly disclosed
Unverified claim — what this report is
This page documents a public listing on a ransomware/extortion group’s leak site, tracked via public threat-intelligence sources. A listing is the attacker’s claim. GalaxyWarden aggregates and reports such claims; we have not independently verified that a breach occurred, what data (if any) was taken, or the accuracy of anything the group asserts, and the named organisation has not necessarily confirmed the incident. Sections above describe what the listing shows and the group’s documented history — not verified findings about the named organisation. If you represent this organisation and believe anything here is inaccurate, tell us and we’ll review it promptly.
Editorial & sourcing policy
GalaxyWarden is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data. Breach information is compiled from publicly accessible sources and threat-intelligence platforms, and is reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — see our content & takedown policy or write to support@galaxywarden.com.
Share this Post on X Reddit Email