VULNpocalypse
LowBreach / campaignMonitoring

n0n ransomware group claims unnamed US commercial truck dealership on leak site

RansomLook reports n0n ransomware claims an unnamed US truck dealership; the claim is unconfirmed, so watch for an official notice.

Published
Exploitation
No, only a leak-site listing tracked by RansomLook, with no confirmation from the victim and no independent verification

What happened

According to the claim tracker RansomLook, the n0n ransomware group posted an entry titled “Company #134” on its leak site on 2026-11-05. RansomLook says the group describes the entry as a “commercial truck dealership” in the “United States.” The listing is a claim by the group. It is not proof of an attack.

The following details are not confirmed:

  • The victim is not named in the listing.
  • No source says the victim has confirmed an incident.
  • No independent outlet has reported or verified the claim.
  • The entry point, the data involved, any data volume and any ransom demand are unknown.

RansomLook’s page for the group lists many other entries labelled “Company #” with a number, alongside named organisations. RansomLook does not say whether any later named entry refers to Company #134 RansomLook.

Am I affected?

Not confirmed. The sources give only a sector, commercial truck dealership, and a country, the United States RansomLook. That is not enough to identify the organisation. It also does not show that any customer, partner or system was affected.

What to do now

  1. Do not treat the leak-site listing as confirmation. Wait for a statement from the organisation itself.
  2. If you work at or with a US commercial truck dealership, ask your IT or security contact whether they know of any incident.
  3. Watch the RansomLook entry for changes, for example if the victim is later named.

Sources