VULNpocalypse
LowBreach / campaignMonitoring

n0n ransomware group claims unnamed US biopharmaceutical firm Company #114

RansomLook reports that the n0n ransomware group claims an unnamed US biopharmaceutical firm on its leak site, wait for official vendor notices.

Published
Exploitation
No, not confirmed: the only evidence is a leak-site listing tracked by RansomLook

What happened

According to the claim tracker RansomLook, the n0n ransomware group says it has a victim it calls “Company #114” and added that entry to its leak site on 2026-11-02. RansomLook describes the listing only as a biopharmaceutical company in the United States.

The listing does not name the company. RansomLook does not report a ransom demand, a data volume, the type of data or how any intrusion occurred. None of these details are confirmed.

No victim has confirmed an incident, and no independent outlet has reported or verified the claim. A leak-site listing is a claim made by the group. It does not prove a breach.

Am I affected?

  • The company’s identity is not confirmed, so this source does not show whether any of your vendors or partners is involved.
  • The listing names no products, software, versions or CVEs. Nothing in it points to a technical vulnerability that affects developers or their dependencies.
  • It is not confirmed whether any customer, patient or partner data is involved.

What to do now

  1. Treat the listing as an unverified claim. Do not contact or name companies based only on the anonymised entry.
  2. If you are a US biopharmaceutical organisation, check that your security team knows about the listing on the n0n site tracked by RansomLook.
  3. If you rely on biopharmaceutical vendors, wait for direct breach notifications from them before you take further action.

Sources