Apical Group listed on N0n ransomware leak site

• Ransomware group: N0n
• Country: Singapore
• Sector: Transportation
• Announcement date: October 12, 2026

The threat actor known as N0n has officially listed the Singapore-based Apical Group on its dedicated leak site. In this announcement, the group claims to have successfully compromised the organization's systems, alleging that they have obtained sensitive logistics and cargo-related data. This development follows a pattern common in modern cyberattacks, where threat actors utilize public-facing leak sites to pressure victims into paying ransoms by threatening to release stolen information to the public.

The alleged ransomware attack and ransom demand

According to the announcement posted on October 12, 2026, the N0n group alleges that Apical Group's data has been compromised. The threat actors have issued an extortion demand totaling 320,000,000 USD. The group has explicitly stated that the stolen data will be published if the specified ransom amount is not paid. To support their claims of a successful breach, the attackers have provided sample files to the public, which include records related to cargo discharge and terminal operations.

This type of tactic is characteristic of double extortion ransomware campaigns. In such scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data. The threat of leaking this information serves as a secondary layer of leverage, as the victim faces not only operational downtime but also significant reputational damage, legal consequences, and the loss of competitive advantages if the data is released.

The data allegedly stolen in the breach

The information provided by the N0n group suggests that the breach involves critical operational and logistics documentation. The attackers claim to have access to various files that could provide insight into the company's supply chain and movement of goods. Specifically, the leaked samples and the group's claims point to the following types of data being involved:

• Cargo discharge records
• Terminal throughput data
• Logistics records exported in SAP format

The inclusion of files exported in SAP format is particularly significant, as it suggests that the attackers may have gained access to core enterprise resource planning (ERP) systems, which are central to large-scale industrial and logistics operations.

About Apical Group

Apical Group is a global agricultural commodity company headquartered in Singapore. The organization specializes in the processing, refining, and logistics of vegetable oils and their derivatives. Furthermore, the company plays a significant role in the management of the palm oil supply chain and is involved in the trade of sustainable agricultural products.

Implications and defensive considerations

This alleged data breach could potentially compromise the confidentiality of Apical Group's operational data. Such a compromise may lead to significant disruptions in logistics operations and supply chain management. Given that the organization is based in Singapore, the incident may trigger legal obligations under local data protection regulations regarding the notification of breaches and the protection of sensitive information.

The provided sample files may serve as an indicator of the authenticity of the data, but they also present secondary risks, such as the potential for follow-on supply chain attacks. When attackers obtain detailed logistics and terminal data, they may use it to identify vulnerabilities in the broader supply chain or to impersonate the company in fraudulent transactions.

While information regarding the N0n group remains limited, the exceptionally high ransom demand suggests that the group may be specifically targeting large-scale corporate entities with significant financial resources. For organizations operating in the transportation and commodity sectors, such incidents highlight the necessity of robust security frameworks. Defensive strategies typically include implementing strict access controls, maintaining offline backups, and ensuring continuous monitoring of network traffic to detect unauthorized data exfiltration. Following such an incident, organizations often find it necessary to cooperate with relevant legal authorities and conduct a comprehensive re-evaluation of their system security to prevent future occurrences.