N0n ransomware group lists Samudera (coastal shipping operations) on its leak site

• Ransomware group: N0n
• Country: Indonesia
• Sector: Transportation
• Announcement date: October 12, 2026

N0n ransomware group claims Samudera data breach

The N0n ransomware group has listed the Indonesian-based shipping and logistics company, Samudera, on its dedicated leak site. The threat actor group claims to have successfully breached the organization's systems and obtained sensitive operational data. This incident follows a pattern common in modern cyberattacks, where threat actors utilize double extortion tactics. In such scenarios, attackers not only encrypt an organization's systems but also steal sensitive information, threatening to publish it on a public leak site if the ransom demands are not met.

According to the announcement made on October 12, 2026, the N0n group has alleged that they have gained unauthorized access to the organization's internal data. The group has issued a deadline, stating that if the ransom is not paid, the stolen information will be released to the public on October 19, 2026. To prevent this disclosure, the attackers are demanding a ransom payment of 12,000,000 USD.

Alleged data types and evidence provided

While the total volume of the stolen data has not been specified, the N0n group has identified specific categories of sensitive information that they claim to have exfiltrated. To support their claims of a successful breach, the group has provided two sample file names as proof of the data in their possession. The information allegedly stolen includes critical documentation essential to the company's maritime and logistics operations.

The specific types of data mentioned in the leak include:

• Charter party records
• Dangerous-goods operational documentation

The exposure of such specific documentation, particularly regarding dangerous goods, highlights the potential risks associated with maritime logistics breaches. Such data can contain sensitive details regarding cargo types, shipping routes, and handling protocols.

About Samudera

Samudera is an Indonesia-based shipping and logistics company. The company operates in the fields of coastal shipping and logistics operations, providing essential services within the regional transportation sector.

Potential impacts and industry implications

This incident may create negative impacts on the organization's operational continuity and commercial reputation. The alleged exposure of dangerous-goods documentation could lead to security vulnerabilities in logistics processes and potential legal sanctions. Furthermore, the disclosure of such data could pose secondary risks for the organization's supply chain partners, who may rely on the integrity of the logistics documentation provided by Samudera.

From a regulatory perspective, the organization may face notification obligations under Indonesian data protection regulations due to the nature of the alleged breach. When organizations in the transportation and logistics sector face such threats, it underscores the importance of robust cybersecurity frameworks. Common defensive steps for organizations in this sector include implementing strict access controls, maintaining offline backups, and conducting regular security audits to identify vulnerabilities in the supply chain.

Information regarding the N0n group remains limited, as is often the case with ransomware collectives that operate with a degree of anonymity. As the deadline for the alleged data release approaches, the situation remains a significant concern for the organization's stakeholders and the broader logistics industry.