Skip to content
← All breaches
Threat actor tracker 22 incidents tracked

N0n — every breach we're tracking

Running log of incidents attributed to or claimed by N0n in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked22
Latest activityOctober 07, 2026
TypeRansomware / extortion

Groups like N0n steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

high October 07, 2026

Chibitek Listed by N0n Ransomware Group

managed IT services (MSP) · USA…

high October 05, 2026

Company #1 Listed by N0n Ransomware Group

technology · United States…

high October 05, 2026

Company #3 Listed by N0n Ransomware Group

IT managed services · United States…

high October 05, 2026

Company #2 Listed by N0n Ransomware Group

Financial services · Canada…

high October 01, 2026

Houston Thyroid & Endocrine Specialists Listed by N0n Ransomware Group

Healthcare - Endocrinology (US) · Houston, Texas…

high September 30, 2026

Houston Thyroid & Endocrine Specialists Listed by N0n Ransomware Group

Healthcare - Endocrinology (US) · Houston, Texas | 14,441 patient document scans from a Houston endocrinology practice: lab results, medical…

high September 29, 2026

Precision Facades Ltd Listed by N0n Ransomware Group

Facade engineering and construction (UK) · United Kingdom…

high September 28, 2026

Dediserve Ltd Listed by N0n Ransomware Group

Cloud infrastructure provider (iomart group) · Dublin, Ireland / FRA1 Frankfurt DC…

high September 25, 2026

TapClicks (marketing analytics platform) Listed by N0n Ransomware Group

Marketing analytics / SaaS · United States | The complete platform source code (97,000+ commits with full history); The multi-tenant instanc…

high September 22, 2026

AFRICA-TECH (IT services / document processing) Listed by N0n Ransomware Group

IT services / document services · Mali | Client documents: scans, attestations, insurance and embassy files, shared business folders | Opera…

high September 22, 2026

FinSoft (Kolibri retail back-office software) Listed by N0n Ransomware Group

Retail software vendor / IT services · Uzbekistan | Client databases of 10+ retail chains (keddo, marc, lancaster, comf_rus, ek, cr, bas_at,…

high September 20, 2026

Fanatics (global sports commerce platform) Listed by N0n Ransomware Group

Sports commerce / e-commerce · United States | Complete order history: 46,902 order files (108 GB) with customer personal data; Accounts-pay…

high September 18, 2026

BeLi Teacher / FSC education centers (AWS) Listed by N0n Ransomware Group

Education / edtech · Vietnam What will be published if no settlement is reached The complete CRM lead database: 152,044 contact records — na…

high September 18, 2026

United Federation of Teachers Listed by N0n Ransomware Group

Education / Labor Union · US — New York What will be published if no settlement is reached The union’s complete legal case archive — approx.…

high September 18, 2026

Argentem Creek Partners (investment firm) Listed by N0n Ransomware Group

Investment management / private credit · United States What will be published if no settlement is reached Full corporate network evidence: 2…

high September 18, 2026

Konnatus (usucapião legal services) Listed by N0n Ransomware Group

Legal services / real estate · Brazil What will be published if no settlement is reached The application database: chart of accounts, income…

high September 18, 2026

STOKR (digital securities platform) Listed by N0n Ransomware Group

Digital securities / investment platform · Luxembourg - EU What will be published if no settlement is reached KYC investor register: full na…

high September 18, 2026

Inter (Venezuela's largest internet provider) Listed by N0n Ransomware Group

Telecommunications / ISP · Venezuela | Subscriber connection records: 15,300,000+ entries, tens of thousands of subscriber addresses with th…

high September 18, 2026

PayPal support operations (Transcom WorldWide) Listed by N0n Ransomware Group

Outsourced customer support / financial services · Netherlands / Tunisia What will be published if no settlement is reached 86.7M connection…

high September 18, 2026

AstraZeneca Türkiye Listed by N0n Ransomware Group

Pharmaceutical manufacturing (GxP) · Türkiye What will be published if no settlement is reached Complete internal network-security configura…

high September 18, 2026

Vietnamese betting operator (GC789 network / Boundless TE) Listed by N0n Ransomware Group

Online gambling / agent platform · Vietnam / Switzerland What will be published if no settlement is reached The complete bettor database: 2,…

high September 18, 2026

Ministry of Education Listed by N0n Ransomware Group

Government / education · Argentina What will be published if no settlement is reached Complete network-security configuration of the ministr…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.