VULNpocalypse
LowBreach / campaignMonitoring

n0n ransomware group claims Company #116, a US identity resolution firm

RansomLook reports the n0n ransomware group listed unnamed US data firm Company #116 as a victim. The claim is unconfirmed, so wait for an official notice.

Published
Exploitation
Not confirmed, the only evidence is a leak-site listing reported by RansomLook

What happened

According to the claim tracker RansomLook, the n0n ransomware group listed a victim on its leak site on 2026-11-02. The group did not name the victim. The listing calls it “Company #116” and describes it as a “data collaboration and identity resolution” business in the United States.

The listing is a claim by the group. It is not proof of a breach. RansomLook’s page shows only the listing date, sector and country. It gives no details about any data taken, systems affected or how access was gained.

What is not confirmed:

  • The identity of the company.
  • Whether the company has confirmed any incident. No source here says it has.
  • Any independent verification of the claim.
  • The entry point, the type of data and the volume of data.

For context, RansomLook’s n0n page lists 203 posts in total for the group (RansomLook). The page also shows several named listings in later days. The sources do not establish that any of them is the same organisation as Company #116, so this advisory does not link them.

Am I affected?

Not confirmed. The victim is unnamed, so you cannot tell from the source whether a vendor you use is involved. The only details available are the sector (data collaboration and identity resolution) and the country (United States), as reported by RansomLook.

What to do now

  1. Do not treat the listing as a confirmed breach. Watch for a notice from your own vendors in this sector.
  2. If a vendor contacts you about an incident, follow its instructions and its stated scope.
  3. Do not download or open material posted on the leak site.

Sources