n0n ransomware group claims attack on unnamed German online lighting retailer

What happened

According to the claim tracker RansomLook, the n0n ransomware group posted an entry titled “Company #131” on its leak site on 2026-11-04. RansomLook describes the listed organisation only as “online lighting retail” in Germany and gives no company name.

The n0n group made this claim itself. RansomLook records the listing but does not verify it. The victim has not confirmed any incident, and no independent outlet has reported on it.

RansomLook does not say what data, if any, was taken. It also does not say whether systems were encrypted, how access was gained, or whether a ransom demand was made. All of these details are not confirmed.

RansomLook’s n0n page also lists many other numbered “Company #” entries in the same period. Some later entries that carry company names share sector descriptions with earlier numbered entries (RansomLook). RansomLook does not say whether Company #131 will be named later.

Am I affected?

• Victim identity: not confirmed. The listing gives only a sector, online lighting retail, and a country, Germany.
• Affected data, customers or partners: not confirmed.
• Software vulnerabilities or products: none are named in the source.

What to do now

1. Do not treat the listing as proof of a breach. Wait for a statement or notification from the company itself.
2. If you are a customer or partner of a German online lighting retailer and receive a breach notice, follow the instructions in that notice.
3. Do not visit or download files from the leak site.
4. Check back for updates. This advisory will change only if a named victim, an official statement or an independent report appears.

Sources

• RansomLook: Company #131: claimed by the n0n ransomware group on its leak site