Cyber Extortion Group Lists 38 Maritime Firms in Coordinated Attack

· Shipping

The cyber extortion group n0n listed 38 maritime organizations on its dark web leak site on 12 October 2026, according to reporting by nOn. The targets span shipping companies, port terminal operators, container operating companies, logistics firms, ship managers and agents, and other maritime-related businesses across 18 countries. The incident appears to trace back to a single vendor shared among the affected companies, suggesting a supply-chain compromise rather than 38 separate breaches. Maritime operators have increasingly digitized port, booking and vessel-management systems, widening the attack surface for extortion crews. The listing means sensitive data from the affected firms may be published unless demands are met, putting pressure on operators to audit third-party software and service providers.

Why it matters：A single compromised vendor reaching 38 operators in 18 countries shows how concentrated third-party risk is across ports and shipping, and could accelerate mandatory cyber-audit requirements for maritime suppliers.

Key points

  • 38 organizations in 18 countries were listed on the group's leak site
  • Targets include ports, container operators, ship managers and agents
  • The breach likely stems from one shared vendor

Sources (original reporting)

More stories from this day