Evolution Spine / All Labs allegedly targeted by N0n ransomware group

• Ransomware group: N0n
• Country: United States
• Sector: Healthcare
• Announcement date: October 16, 2026

N0n claims to have compromised Evolution Spine / All Labs

The threat actor known as N0n has listed data allegedly belonging to Evolution Spine / All Labs on their leak site. The announcement, which appeared on October 16, 2026, indicates a targeted attack against the organization. According to the claims made by the threat actor, the group has successfully compromised the systems of Evolution Spine / All Labs and has obtained a variety of sensitive information.

The N0n group asserts that they have gained access to both operational and financial data belonging to the organization. This type of claim is characteristic of modern ransomware operations, often referred to as double extortion. In such scenarios, attackers do not merely encrypt a victim's files to disrupt operations; they also exfiltrate sensitive data to use as leverage. The threat actor has stated that the stolen information may be released publicly if the ransom demand is not met. No specific ransom demand has been disclosed in the announcement.

Alleged data types involved in the breach

The data allegedly stolen by the N0n group is extensive and covers multiple facets of the organization's operations. The information claimed to be in the possession of the attackers includes highly sensitive technical, administrative, and financial records. This breadth of data suggests a significant intrusion into the organization's internal networks.

The specific types of data identified in the claim include:

• FDA quality system records (including CAPAs, device history, design drawings, and audit files)
• An inventory database containing 317 tables
• Customer and shipping records
• Financial documents (including tax forms and payroll timesheets)
• Staff mailbox exports

The inclusion of design drawings and quality system records is particularly notable, as these represent the core intellectual property of a medical device manufacturer.

About Evolution Spine

Evolution Spine is a company that manufactures implants and medical devices for spinal surgery. The organization specializes in the design and production of spinal fusion systems and related surgical equipment. Given its role in the manufacturing of critical medical components, the company operates within a highly regulated environment where data integrity and confidentiality are paramount.

Potential impact and industry implications

This alleged breach may pose significant risks to the organization's intellectual property and trade secrets, particularly regarding the design and manufacturing processes of their spinal surgical equipment. Because the entity operates within the healthcare sector, the exposure of this data might fall under strict regulatory frameworks, such as HIPAA, which governs the protection of sensitive patient and organizational information.

The exposure of personal information belonging to employees and customers could potentially lead to identity theft or targeted phishing attacks. Furthermore, the leak of such sensitive information can have negative impacts on the organization's operational continuity and overall reputation. While information regarding the N0n group remains limited, the potential fallout for a healthcare-related manufacturer is substantial.

In general, organizations in the healthcare and medical device sectors can take several defensive steps to mitigate the risks of such attacks. Implementing robust access controls and multi-factor authentication can help prevent unauthorized access to sensitive databases. Regular auditing of system logs, maintaining offline backups, and conducting comprehensive employee training on phishing awareness are also standard industry practices to bolster cybersecurity posture. As ransomware groups continue to target specialized manufacturing sectors, maintaining a rigorous defense-in-depth strategy remains essential for protecting both intellectual property and sensitive stakeholder data.