VULNpocalypse
LowBreach / campaignMonitoring

Company #124: n0n ransomware group claims US mobile advertising firm

RansomLook reports the n0n ransomware group listed an unnamed US mobile advertising firm as Company #124, so partners should watch for official notice.

Published
Exploitation
No, only a leak-site listing tracked by RansomLook, not confirmed by the victim or any independent source

What happened

According to the ransomware tracker RansomLook, the n0n ransomware group added an entry titled “Company #124” to its leak site on 2026-11-03. RansomLook describes the listed organisation as being in “mobile advertising” in the United States.

The listing does not name the company. It is the group’s claim, not proof of an intrusion. The following details are not confirmed:

  • The identity of the victim.
  • Whether the victim has confirmed any incident. No source says it has.
  • Independent verification of the claim. No independent outlet has reported it.
  • How the attackers got in, and whether any data was taken. Data type and volume are also unknown.

RansomLook’s page for the group also lists many other recent entries, both named and anonymised “Company #” posts (RansomLook). The source does not link Company #124 to any named organisation.

Am I affected?

Not confirmed. The sources do not identify the company, its products or its customers. No software, versions or CVEs are involved in the reporting.

What to do now

  1. If you rely on a US mobile advertising provider, watch for an official statement or breach notification from that provider.
  2. Do not download or share material from leak sites to check the claim.
  3. Check this advisory again for updates if the victim or an independent outlet confirms details.

Sources