n0n Claims Data Theft at 38 Maritime and Logistics Organizations in Mass Extortion Push

The data-theft extortion group n0n claims to have stolen information from 38 organizations across 18 countries, predominantly shipping, port and logistics businesses, and is demanding multimillion-dollar payments to prevent publication. SOCRadar reported that the group added all 38 organizations to its dark web leak site on October 12, with South Korea accounting for 12 listings. Reviewed ransom demands range from $2.4 million to $14 million, and the group scheduled publication for October 19 at 13:27 UTC. Neither the claimed breaches nor the initial access method has been confirmed.

Small, narrowly scoped archives, recurring operational data types and the absence of matching infostealer credentials suggest a possible shared application compromise, according to SOCRadar, rather than establishing separate intrusions at every listed organization. The listings include terminal operators, shipping lines and port IT providers, and potential exposure could extend to unlisted carriers and business partners whose records passed through affected systems. Maritime-sector security teams should validate any claimed exposure, review shared application and provider dependencies, and assess whether operational or counterparty records may be at risk.