N0n ransomware group claims data breach against ILCS Pelindo

• Ransomware group: N0n
• Country: Indonesia
• Sector: Transportation
• Announcement date: October 12, 2026

N0n ransomware group targets ILCS Pelindo

The threat actor group known as N0n has officially listed the Indonesian-based organization ILCS Pelindo on its ransomware leak site. According to the announcement made on October 12, 2026, the group claims to have successfully compromised the organization, specifically targeting its operational logistics data. This development marks a significant potential security incident for the logistics and digital solutions provider.

The threat actor has utilized a double extortion tactic, a common method in modern ransomware campaigns. In such scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive information to use as leverage. By threatening to publish stolen data on a public leak site, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of confidential business information.

Details of the alleged attack and ransom demand

The N0n group has stated that they have access to critical operational archives. Specifically, the group is threatening to publish operational EDI (Electronic Data Interchange) archives. To incentivize the organization to pay, the attackers have issued a ransom demand of 2,400,000 USD. The group has set a deadline for this payment, claiming that the stolen data may be released on October 19, 2026, if the financial demands are not met.

Publicly available information regarding the N0n group remains limited, making it difficult to determine their full scope of operations or specific motivations beyond the financial demand. The group's announcement includes screenshots intended to prove the validity of their claims. These samples include files such as '1060998_EDI SNR 041E.EDI' and '1078202_BAPLIE BONGKAR TANTO HORAS VOY.149 (1).xlsx', which are presented as evidence of the breach.

Claimed affected data types

Based on the group's announcement, the following data types are claimed to have been compromised:

• Operational EDI archives
• Container manifests

About ILCS Pelindo

ILCS (Integrated Logistics Solution) is an Indonesian-based provider specializing in port logistics and digital solutions. Operating under the umbrella of Pelindo, the organization plays a vital role in the region by providing essential technology and logistics services for port operations. Given its position in the transportation sector, the integrity of its digital infrastructure is critical to maintaining seamless logistics workflows.

Impact assessment and industry implications

The claims made by N0n could lead to significant disruptions in the organization's logistics operations and the exposure of sensitive trade secrets. The potential leakage of EDI data is particularly concerning, as it could jeopardize the information of various supply chain partners. Such exposure often creates a foundation for secondary attacks, such as targeted phishing campaigns directed at the organization's third-party partners.

Furthermore, the organization may face legal liabilities under Indonesian data protection regulations following such a breach. The use of double extortion methods can deepen reputational damage and increase secondary risks if the data is indeed published. For organizations operating within the transportation and logistics sector, these incidents highlight the necessity of robust cybersecurity frameworks.

To mitigate such risks, organizations in this sector typically focus on several defensive pillars. Implementing strict access controls and multi-factor authentication can help prevent unauthorized entry into sensitive systems. Regular backups of critical data, stored in an offline or immutable format, are essential for recovery. Additionally, monitoring network traffic for unusual patterns and conducting regular security audits can assist in the early detection of potential compromises. Protecting the integrity of EDI exchanges and container manifests is paramount to maintaining the trust of global supply chain partners.