VULNpocalypse
LowBreach / campaignMonitoring

n0n ransomware group claims attack on unnamed US precious metals dealer

RansomLook reports the n0n group claims an unnamed US precious metals dealer on its leak site; unverified, so watch for official notices.

Published
Exploitation
No, the only source is a leak-site listing recorded by a claim tracker, with no confirmed intrusion or exploitation

What happened

According to the claim tracker RansomLook, the n0n ransomware group added an entry titled “Company #123” to its leak site on 2026-11-03. The listing describes the organisation only as a “precious metals dealer” in the “United States”.

The listing is a claim by the group, not proof of an attack. Several points are not confirmed:

  • The victim’s identity. The entry is anonymised.
  • Whether the company has confirmed any incident. No statement from it appears in the sources.
  • Independent verification. Only a claim tracker carries this story.
  • The entry point, what data was allegedly taken, how much data is involved and whether anything was encrypted.

Am I affected?

Not confirmed. The sources do not name the company, so there is no way to tell from this listing whether a specific dealer, or its customers, are involved.

What to do now

  1. If you are a customer of a US precious metals dealer, watch for official communication from that company rather than relying on the leak-site listing.
  2. Do not search for or download any data the group may publish. Its contents and origin are unverified.
  3. As a general precaution, not drawn from the sources, treat unexpected messages that mention a breach or ask for payment or account details with caution, and verify them through the company’s known contact channels.

Sources