Breaches · 6h ago
SOCRadar said n0n added 38 maritime and logistics organizations in 18 countries to its leak site, with a publication deadline of Oct. 19, 2026 and claimed ransom demands ranging from $2.4 million to $14 million. The listed victims include container terminals, shipping lines, port IT providers, logistics companies, and related businesses, with South Korea accounting for 12 entries.
The posted data is said to include vessel schedules, container manifests, gate movement records, shipping documents, and terminal system configuration records. SOCRadar said the pattern of small, narrowly scoped dumps points to a shared application or credential path, not 38 separate network intrusions, so a limited compromise can still expose how ports actually run.
For organizations that depend on third-party portals or partner data feeds, the exposure can sit in the shared business layer even when no full network breach is visible. The claims are still unverified by the named organizations, but if they are accurate, the operational blast radius reaches schedules, routing, and gate movement across multiple firms and countries.
1 source covering this story
SOCRadar details n0n extortion claims target 38 global maritime and logistics organizations, raising port data exposure concerns.
Part of the PlainSec briefing for 2026-10-15