Nam Dinh Vu Port targeted by N0n ransomware group

• Ransomware group: N0n
• Country: Vietnam
• Sector: Transportation
• Announcement date: October 12, 2026

N0n ransomware group claims data breach at Nam Dinh Vu Port

The ransomware group known as N0n has announced on its leak site that it has compromised data belonging to Nam Dinh Vu Port, a container terminal operator in Vietnam. According to the group's announcement, the incident occurred on October 12, 2026. The threat actors are demanding a ransom payment of 5,000,000 USD to prevent the release of the stolen information.

Ransomware attacks often employ a tactic known as double extortion. In this scenario, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data before deployment. The goal is to pressure the victim into paying by threatening to publish the stolen information on public leak sites, which can lead to severe reputational damage, regulatory fines, and loss of competitive advantage. In this specific case, the group has set a deadline, stating that if the ransom is not paid, the data will be published on October 19, 2026.

Details of the alleged data theft

The N0n group claims to have successfully acquired several types of sensitive information from the terminal's infrastructure. The breach reportedly involves the acquisition of the terminal's EDI message archives and internal system configuration files. These files are critical to the smooth operation of maritime logistics and the underlying IT architecture of the facility.

The specific data types mentioned in the group's claim include:

• Logistics operational data, specifically EDI message archives containing vessel schedules, container manifests, gate movement records, and booking messages
• Internal system configuration files

The exposure of such data, particularly EDI (Electronic Data Interchange) messages, is highly significant in the maritime sector. These messages facilitate the automated exchange of business documents between different trading partners. When these archives are compromised, the confidentiality of the entire logistics chain is potentially jeopardized.

About Nam Dinh Vu Port

Nam Dinh Vu Port is a container terminal operator based in Hai Phong, Vietnam. The organization provides essential services in maritime logistics and port terminal operations, serving as a key node in the regional supply chain.

Analysis and potential impact

This alleged leak may pose a significant risk to the operational continuity and commercial confidentiality of Nam Dinh Vu Port. Because the compromised EDI messages may contain sensitive logistics data belonging to international shipping lines, this incident could create secondary risks for third-party supply chain partners who rely on the secure exchange of information with the terminal.

Furthermore, the exposure of internal system configuration files is a serious security concern. Such information may provide attackers with a technical roadmap for future targeted attacks, allowing them to understand the network topology and identify further vulnerabilities. While information regarding the N0n group remains limited, the high ransom demand suggests that the group's primary motivation is financial gain.

Organizations operating in the transportation and logistics sector face unique challenges during such incidents. Beyond the immediate operational disruption, they may face legal obligations under Vietnamese data protection regulations. To mitigate such risks, organizations in this sector typically focus on robust backup strategies, network segmentation to prevent lateral movement, and strict access controls for sensitive EDI and configuration data. Continuous monitoring of network traffic can also help in the early detection of unauthorized data exfiltration, which is a hallmark of modern ransomware campaigns.