N0n ransomware group lists April Asia (port agency operations) on its leak site

• Ransomware group: N0n
• Country: Indonesia
• Sector: Transportation
• Announcement date: October 12, 2026

The threat group known as N0n has officially listed the Indonesian-based company April Asia on its leak site. According to the group's announcement, the organization has been targeted in a cyberattack resulting in a data breach. The threat actor claims to have successfully exfiltrated sensitive information belonging to the company, marking a significant incident for the logistics and port agency sector in the region.

Details of the N0n ransomware claim

The N0n group has publicly alleged that April Asia's data has been compromised. In their announcement, the group established a deadline for the victim organization, stating that if the ransom is not paid, the stolen data will be published on their leak site on October 19, 2026. The group has issued a specific ransom demand of 800,000 USD from the organization to prevent the public release of the information.

This incident follows a pattern often seen in modern ransomware operations, frequently referred to as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to leak the information publicly, the threat actors increase the pressure on the victim to meet their financial demands. While information regarding the specific methods or the identity of the N0n group remains limited in the public domain, their tactics in this instance align with these broader industry trends.

Data involved in the alleged breach

The announcement from N0n claims that the exfiltrated data includes specific operational records critical to the company's logistics functions. To support their claim of a successful breach, the group has shared two Excel files (.xlsx) as proof of the stolen information. The specific types of data mentioned in the claim include:

• Container gate movement records
• Damage management records

The inclusion of such specific operational files suggests that the attackers may have targeted internal administrative and logistical documentation rather than just generic corporate files.

About April Asia

April Asia is an Indonesia-based port agency and logistics service provider. The company specializes in operational processes such as container gate movements and damage management. Given its role in the logistics sector, the company plays a part in the movement and oversight of goods through port operations.

Potential impact and industry implications

This incident may lead to operational disruptions within logistics activities. The content of the leaked data could potentially expose the company's trade secrets and operational processes, which are vital for maintaining competitive advantages and efficient supply chain management. Furthermore, the publication of such data could create secondary risks for the company's supply chain partners, as information regarding logistics movements and damage management often involves third-party interests.

From a regulatory perspective, it is likely that the organization may face legal obligations under Indonesian data protection regulations due to the nature of the alleged breach. When organizations in the transportation and logistics sector face such threats, common defensive steps include implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security awareness training for staff to prevent initial access via phishing.

The potential for supply chain contagion is a significant concern in the logistics industry. When a service provider like a port agency is compromised, the ripple effects can impact various stakeholders involved in the movement of goods. Organizations in this sector are encouraged to monitor their digital footprints and ensure that their data protection measures are sufficient to meet local legal requirements and protect their operational integrity.