n0n
Data as of November 5, 2026.
Credential exposure before the attack
16.1% of n0n victims whose domain we can identify (15 of 93) had employee credentials leak in the 12 months before n0n named them as a victim.
We don't know whether any of these credentials were how n0n gained initial access.
What industries n0n targets
Sector identified for 69 of 93 victims.
| Logistics | 31 | |
| Healthcare | 8 | |
| Manufacturing | 7 | |
| Technology | 4 | |
| Financial Services | 3 | |
| Construction | 3 | |
| Retail | 3 | |
| Telecommunications | 3 |
Where the victims are located
Country identified for 85 of 93 victims.
| United States | 30 | |
| South Korea | 12 | |
| Brazil | 5 | |
| Indonesia | 4 | |
| Japan | 3 | |
| China | 3 | |
| Canada | 2 | |
| Singapore | 2 |
Most recent n0n victims
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Digital Group of Companies digital-asia.com | Telecommunications | Malaysia | Nov 3, 2026 |
| Minutes Quick Services minutes.co.ae | Not identified | United Arab Emirates | Oct 31, 2026 |
| Ingelectus ingelectus.com | Not identified | Spain | Oct 27, 2026 |
| Adirondack Networks adirondacknetworks.com | Not identified | United States | Oct 26, 2026 |
| Andrews Advisory Group andrewsadvisorygroup.com | Not identified | United States | Oct 26, 2026 |
| Asisken asisken.com | Healthcare | Not identified | Oct 26, 2026 |
| GPIC gpic.pt | Not identified | Portugal | Oct 26, 2026 |
| Horn of Africa Regional Environment Centre and Network hoarec.org | Education | Not identified | Oct 26, 2026 |
| Keidel Supply keidel.com | Retail | United States | Oct 26, 2026 |
| Mach Law mach-law.com | Legal | United States | Oct 26, 2026 |
| Pure Grow Diamonds puregrowndiamonds.com | Retail | United States | Oct 26, 2026 |
| r4yqHC3AhUBmQ88SJhArKTVBPREbvrEm suntechnics.ch | Energy | Switzerland | Oct 26, 2026 |
| Technoleads technoleads.com | Media | Canada | Oct 26, 2026 |
| Texas Cartage Warehouse texcar.com | Logistics | United States | Oct 26, 2026 |
| Arthritis Center of Riverside thearthritiscenter.com | Healthcare | United States | Oct 26, 2026 |
| Toplivo toplivo.bg | Construction | Bulgaria | Oct 26, 2026 |
| Performance Ford performanceforddealer.com | Automotive | United States | Oct 23, 2026 |
| Hanjin Information Systems & Telecommunication hist.co.kr | Not identified | South Korea | Oct 22, 2026 |
| TheHomeMag Northern California thmnorthernca.com | Not identified | United States | Oct 22, 2026 |
| 52UstcWSVNbYSMqvMzbSaHaJP5m74HZk finzly.com | Financial Services | United States | Oct 20, 2026 |
Showing the 20 most recent of 93. Browse recent data breaches for more.
n0n leak site
The address we've seen n0n publish victims from. Any .onion address needs the Tor Browser.
nongzecboljwv3yfndkggsybsglfrkffw7bvk2zemuteoxe6etpusnad.onion
n0n questions
Is n0n still active?
Yes. n0n posted its most recent victim on November 3, 2026. That's 79 victims in the last 30 days.
How many victims has n0n claimed?
n0n has named 93 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did n0n first appear?
The first victim we recorded for n0n was posted on September 21, 2026. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does n0n target?
Logistics accounts for the most victims we can classify, with 31. Healthcare follows at 8. We could identify a sector for 69 of 93 victims, so treat this as the shape of the targeting rather than a full census.
Has n0n already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.