n0n ransomware group claims Company #137, a Canadian mobile ad data firm

What happened

According to the claim tracker RansomLook, the n0n ransomware group added an entry titled “Company #137” to its leak site on 2026-11-05. RansomLook’s listing gives only two details about the organisation: its sector is “mobile advertising and audience data” and its country is Canada.

The listing does not name the organisation. RansomLook does not report a victim name, what data was allegedly taken, how much, how access was gained, or whether any systems were encrypted. All of these are not confirmed.

The leak-site post is a claim by the group. It is not proof of an attack. No source says the organisation has confirmed an incident, and no independent outlet has verified the claim.

According to RansomLook, the group’s site uses numbered “Company #” placeholders for many entries. The same tracker page shows named posts appearing later with sector and country descriptions that match some of those earlier placeholders. No source links Company #137 to a named organisation.

Am I affected?

Not confirmed. The organisation is not named, so the sources do not let anyone identify affected customers, partners or data subjects. You could only be affected if you share data with the specific Canadian mobile advertising and audience data company behind this listing. Its identity is not confirmed.

What to do now

1. Do not treat the listing as confirmation of a breach. The claim is unverified, according to the sources available.
2. If you use Canadian mobile advertising or audience data vendors, watch for direct communication from them. Follow any guidance they issue.
3. Check RansomLook for updates to the n0n group page, for example a named post that replaces the placeholder.

Sources

• RansomLook: N0n group page, Company #137 entry