N0n ransomware group lists Fanatics (global sports commerce platform) on its leak site

• Ransomware group: N0n
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: September 20, 2026

N0n claims to have stolen data from Fanatics

The threat group known as N0n has listed the global sports commerce platform Fanatics on their dedicated leak site. According to the announcement made on September 20, 2026, the group claims to be in possession of approximately 108 GB of data allegedly belonging to the organization. This incident follows a pattern often seen in modern cyberattacks where threat actors target high-value data to exert pressure on a victim organization.

In the announcement published on September 20, 2026, the N0n group claims to have gained destructive control over the cloud data estate of Fanatics. The group further states that the process of data deletion has already commenced. The group has issued a deadline, indicating that if a settlement is not reached by September 23, 2026, the stolen information will be released to the public. Information regarding the specific identity and background of this group remains limited.

The scope of the alleged data breach

The data allegedly targeted in this attack is significant in volume and variety. The group claims to have access to 46,902 files, which reportedly include a wide array of sensitive information. The contents of the alleged leak include customer personal data, order history, and various financial and administrative documents. Specifically, the group claims to hold:

• Customer personal data
• Order history
• Invoice data
• Bank transaction records
• Tax exemption certificates

Beyond these specific categories, the group also claims to possess accounts-payable invoices belonging to league and brand partners, customer balances, a bank transaction archive, and a fraud-prevention data set. The inclusion of such diverse data types highlights the potential breadth of the breach within the organization's digital environment.

About Fanatics

Fanatics is a global e-commerce platform that specializes in the sale of licensed sports merchandise, jerseys, and sports equipment. The company maintains a significant global footprint by partnering with major sports leagues and teams worldwide to offer a wide range of sports products to a diverse consumer base.

Potential impact and industry implications

The claims made by the N0n group carry significant implications for both the organization and its stakeholders. The alleged exposure of customer personal data and transaction records may increase the risk of identity theft and financial fraud for the organization's customers. Furthermore, because the entity is based in the United States, this incident may lead to legal consequences under state-level data protection laws and regulatory oversight.

The potential exposure of such sensitive data could negatively impact the organization's reputation and create secondary risks for its various supply chain partners. Additionally, the claim that the group has gained access to the organization's cloud infrastructure suggests potential risks to the organization's operational continuity. When threat actors claim to have control over cloud environments, it introduces a layer of complexity regarding how the organization maintains its services and protects its digital assets.

In the broader context of cybersecurity, this incident reflects the growing trend of double extortion, where attackers not only encrypt systems but also steal data to use as leverage in ransom negotiations. Such tactics are designed to maximize pressure on an organization by threatening the public release of sensitive information. To defend against these types of threats, organizations in the retail and e-commerce sectors often implement multi-layered security strategies. These include robust identity and access management (IAM) to protect cloud environments, continuous monitoring of network traffic to detect unauthorized access, and comprehensive data encryption to mitigate the impact of a potential leak. Furthermore, maintaining strict compliance with regional data protection regulations is a critical component of modern risk management for global commerce platforms.