VULNpocalypse
LowBreach / campaignMonitoring

Centrepoint: n0n ransomware group claims attack on Saudi fashion retailer

The n0n ransomware group lists Centrepoint on its leak site, according to RansomLook. It is unconfirmed, so watch for official notices from Centrepoint.

Published
Exploitation
No, not confirmed. The only evidence is a leak-site listing recorded by RansomLook.

What happened

According to the claim tracker RansomLook, the n0n ransomware group added Centrepoint to its leak site on 2026-11-06. RansomLook describes the listed entity as “fashion and lifestyle retail” in Saudi Arabia (RansomLook).

A leak-site listing is a claim made by the group. It is not proof of an attack. Several points are not confirmed:

  • Centrepoint has not confirmed any incident in the provided sources.
  • No independent outlet has verified the claim.
  • The entry point is not confirmed.
  • Whether any data was taken, and how much, is not confirmed.

RansomLook’s page for n0n also shows an unnamed entry, “Company #127”, posted on 2026-11-03 with the same description, “fashion and lifestyle retail” in Saudi Arabia (RansomLook). The source does not say whether that entry refers to Centrepoint, so any link between the two is not confirmed.

Am I affected?

Not confirmed. The sources do not say which systems, data or customers are involved, if any.

What to do now

  1. Watch for an official statement or notification from Centrepoint before acting on the claim.
  2. If Centrepoint publishes guidance, follow that guidance rather than the leak-site listing.
  3. Treat unexpected messages that refer to this incident with caution. This is a general precaution, not something the sources state.

Sources