VULNpocalypse
LowBreach / campaignMonitoring

n0n ransomware group claims Company #125, a US oncology biopharma

The n0n ransomware group claims an unnamed US oncology biopharma on its leak site, unverified, so partners should await official notice.

Published
Exploitation
No, only a ransomware leak-site listing tracked by RansomLook, with no confirmation from the victim

What happened

The n0n ransomware group lists an entry called “Company #125” on its leak site, according to the claim tracker RansomLook. RansomLook dates the listing 2026-11-03. It describes the company as a “clinical-stage biopharmaceutical (oncology)” organisation in the United States.

The group does not name the company in this entry, according to RansomLook. A leak-site listing is the group’s own claim and is not proof of an attack.

The following details are not confirmed:

  • The victim’s identity.
  • Whether the company has acknowledged any incident.
  • Whether data was taken, and how much.
  • The entry point.
  • Any independent verification of the claim.

Am I affected?

Not confirmed. The source gives only a sector and a country. It contains no product, software or version information that would let developers check exposure. Nothing in the source suggests a risk to the wider software supply chain.

What to do now

  1. If you have a business relationship with a US clinical-stage oncology biopharmaceutical company, watch for an official statement or breach notification from that company.
  2. Do not treat the leak-site listing as confirmed until the company or an independent party confirms it.
  3. Check the RansomLook n0n group page for any update to this entry.

Sources