VULNpocalypse
LowBreach / campaignMonitoring

n0n ransomware group claims Company #119, a Middle East fashion retailer

The n0n ransomware group lists an unnamed Middle East value fashion retailer as Company #119, which is unconfirmed, so watch for an official notice.

Published
Exploitation
No, there is no confirmed evidence; the only source is a leak-site listing recorded by a claim tracker

What happened

According to the claim tracker RansomLook, the n0n ransomware group posted an entry titled “Company #119” on its leak site on 2026-11-03. The listing does not name the organisation. It describes it only as “value fashion retail” in the “Middle East”. The listing is the group’s claim, not proof of an attack.

RansomLook also records a later n0n entry dated 2026-11-06 titled “Max Fashion”, with the same “value fashion retail, Middle East” description. RansomLook does not state that this entry and Company #119 refer to the same organisation, and that link is not confirmed.

The following details are not confirmed:

  • The victim has not confirmed any incident, according to the sources available.
  • No independent outlet has verified the claim.
  • The entry point, the type and volume of any data, and whether systems were encrypted are all not confirmed.

Am I affected?

The sources do not provide enough detail to answer this. They do not name the organisation behind “Company #119”, list any affected products, or describe any data. If you are a customer, employee or supplier of a value fashion retailer in the Middle East, there is currently no confirmed impact you can check against.

What to do now

  1. Treat the listing as an unverified claim, as recorded by RansomLook.
  2. If you have a relationship with a retailer matching this description, watch for an official statement or notification from that company.
  3. Do not download or share any material posted on the group’s leak site.

Sources