VULNpocalypse
LowBreach / campaignMonitoring

n0n ransomware group claims Company #122, an unnamed US online travel firm

n0n ransomware group claims Company #122, an unnamed US online travel and loyalty firm; the claim is unverified, so watch for official notices.

Published
Exploitation
No confirmed evidence, only a leak-site listing recorded by RansomLook

What happened

According to the ransomware tracker RansomLook, the n0n ransomware group added an entry titled “Company #122” to its leak site on 2026-11-03. RansomLook records the group’s description of the entry as “online travel and consumer loyalty” in the United States. The listing does not name the organisation.

This is a claim by the group. It is not proof. The following are not confirmed:

  • The identity of the organisation: not confirmed.
  • Whether the organisation has confirmed any incident: not confirmed. No source says it has.
  • Independent verification of the claim: not confirmed.
  • The entry point, the type of data and the volume of data: not confirmed.
  • Whether any data was published: not confirmed.

RansomLook also shows that the n0n leak site is very active. The tracker counts 203 posts in total, and many of the entries are anonymised “Company #” listings, according to RansomLook.

Am I affected?

Not confirmed. The sources do not name the organisation, so they do not identify any affected product, service, customer group or dataset. Nothing in the sources links this claim to any software vulnerability, package or developer tooling.

What to do now

  1. Do not treat the leak-site entry as confirmation of a breach. The only source is a tracker recording the group’s own listing, per RansomLook.
  2. If you use a US online travel or loyalty service, rely on official communication from that company for any incident details.
  3. If you are investigating, follow the RansomLook entry for changes, such as the group later naming the organisation, and check whether the organisation responds.

Sources