Skip to content
Ransomware

N0n ransomware group lists Asyaport (container terminal operations) on its leak site

The threat group N0n claims to have exfiltrated data belonging to the Turkey-based company Asyaport.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: N0n
  • Country: Türkiye
  • Sector: Transportation
  • Announcement date: October 12, 2026

N0n ransomware group claims data breach at Asyaport

The threat group known as N0n has officially listed the Turkish-based organization Asyaport on its ransomware leak site. According to the announcement made on October 12, 2026, the group claims to have successfully exfiltrated sensitive operational data belonging to the company. The threat actor has issued a ransom demand of 4.8 million USD, threatening to publish the stolen information on October 19, 2026, if the payment is not fulfilled. Currently, public information regarding the specific identity and capabilities of the N0n group remains limited.

Details of the alleged attack and ransom demand

The N0n group's announcement suggests a targeted operation aimed at compromising the operational integrity of the organization. By listing the victim on a dedicated leak site, the attackers utilize a common pressure tactic designed to force a settlement through public exposure. This method is often associated with double-extortion tactics, where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to use as leverage for further payment demands.

The threat actor has provided evidence to support their claims, including screenshots that purportedly show samples of the stolen information. These samples reportedly include SQL files and various text files containing specific container-related information. The group has set a strict deadline for the ransom payment, indicating that the data is intended for public release if their financial demands are not met by the specified date.

Alleged stolen data types

Based on the claims made by the N0n group, the following types of information have been identified as potentially compromised:

  • Dangerous-goods operational records
  • Internal database scripts
  • Container operational data

About Asyaport

Asyaport is one of the largest container ports in Turkey, located in Tekirdağ. Operated in partnership with MSC (Mediterranean Shipping Company), the port provides international maritime transportation and logistics services.

Potential impact and industry implications

The claims made by the N0n group pose significant risks to the organization's operational continuity and the protection of its trade secrets. The alleged exposure of dangerous-goods operational records is particularly concerning, as it could negatively impact logistics security and regulatory compliance. Such a breach in a critical infrastructure sector like transportation can have cascading effects across the supply chain.

From a legal and regulatory perspective, the disclosure of sensitive commercial information may lead to administrative and legal sanctions for the organization under regulations such as KVKK. Furthermore, the potential publication of this data could result in secondary risks, such as targeted phishing attacks directed at the organization's supply chain partners. In the logistics and transportation sector, maintaining the integrity of operational data is vital for ensuring the security of goods and the efficiency of international trade.

To mitigate such risks, organizations in this sector typically focus on robust defensive measures. These include implementing strict access controls, maintaining offline backups of critical databases, and conducting regular security audits. Enhancing monitoring capabilities to detect unauthorized data exfiltration and ensuring compliance with regional data protection laws are also essential components of a modern cybersecurity posture. As ransomware groups continue to use double-extortion tactics, the ability to protect sensitive operational records remains a primary concern for global logistics providers.

In the Intelligence 360 plan

Executive Protection

Monitor whether your executives’ email addresses and usernames appear in leaks.

Related stories