VULNpocalypse
LowBreach / campaignMonitoring

n0n ransomware group claims Dompé Farmaceutici on its leak site

The n0n ransomware group lists Dompé Farmaceutici on its leak site, per RansomLook. The claim is unconfirmed, so watch for an official company notice.

Published
Exploitation
No, there is only an unverified leak-site listing reported by the tracker RansomLook

What happened

According to the leak-site tracker RansomLook, the n0n ransomware group added an entry titled “Dompé Farmaceutici S.p.A.” to its leak site on 2026-11-06. RansomLook records the group’s description of the victim as “pharmaceutical (biotechnology and specialty)”, with the location given as “Italy (United States data)”.

RansomLook also lists an earlier n0n entry on 2026-11-03. That entry is named “Company #126” and has the same description. The sources do not confirm whether the two entries refer to the same organisation.

A listing on a leak site is a claim by the group, not proof. The following are not confirmed by the sources:

  • Dompé Farmaceutici has not confirmed any incident.
  • No independent outlet has verified the claim.
  • The entry point is unknown.
  • The type and volume of any data are unknown.
  • Whether any systems were encrypted is unknown.

Am I affected?

Not confirmed. The listing gives no detail about whose data is involved, beyond the group’s label “United States data” (RansomLook).

Customers, partners, suppliers and employees of Dompé Farmaceutici cannot tell from this source whether their information is involved.

What to do now

  1. Watch for an official statement or notification from Dompé Farmaceutici. Treat the leak-site listing as an unverified claim until then.
  2. Do not visit, download or redistribute material from the group’s leak site.
  3. Check any unexpected message that mentions this claim through contacts you already know at the company. This is general caution, not something the source reports.

Sources