N0n ransomware group

Who they are

No published writeup exists for N0n that we would stand behind, which is common for newer and short-lived crews. What we can say comes from the site itself: it is not currently responding, and it states industries we have grouped into 2 sectors.

Descriptions are compiled from public reporting and vendor research. They describe how a group has historically operated and can lag its current behaviour; the status and timings above are our own.

Current status

N0n's leak site is not answering. Sites go dark for infrastructure trouble, a deliberate quiet period, or a takedown, and a good number return weeks later under the same name, so the entry stays on the list either way.

The last change we recorded on it was 15h ago (27 Sep 2026 10:15 UTC).

Which organisations this group has named, and when, is part of the SINON platform rather than this page. Create an account to search it, or to be told automatically if a name you care about turns up.

Sectors targeted

Industries this group has been observed going after, most common first.

• IT Services / Document Services
• Telecommunications / ISP

Leak site capture

N0n's extortion site as we last captured it, served through our own origin — opening the real thing would put you on their infrastructure.