Polaris Shipping listed on N0n ransomware leak site

• Ransomware group: N0n
• Country: South Korea
• Sector: Transportation
• Announcement date: October 12, 2026

The N0n ransomware group has officially listed Polaris Shipping on its dedicated leak site. The threat actors claim to have successfully compromised the South Korean shipping company, alleging that they have gained access to sensitive internal information belonging to the organization.

The alleged attack and ransom demand

According to the announcement made on October 12, 2026, the threat actor known as N0n claims to have compromised the financial and operational data of Polaris Shipping. The group has issued a significant ransom demand of 12,000,000 USD in exchange for not releasing the stolen information.

The group has set a deadline for the payment, stating that they will proceed to publish the stolen data on October 19, 2026, if the ransom is not met. To support their claims of a successful breach, the attackers have provided sample files as evidence. These samples reportedly include internal financial records and various vessel operational reports, intended to prove that the group holds legitimate access to the company's private documentation.

The data involved in the claim

The N0n group claims to be in possession of several types of sensitive documentation. Based on the information provided by the attackers, the stolen data includes:

• Financial records
• Sales vouchers
• Operational reports

About Polaris Shipping

Polaris Shipping is an international shipping company headquartered in South Korea. The organization specializes in the dry bulk transportation sector. The company utilizes a fleet of large-scale bulk carriers to provide comprehensive global logistics services to its clients.

Potential impact and industry implications

This alleged data breach carries significant risks for the organization. If the company's financial and operational data is indeed exposed, it could lead to substantial reputational damage and create competitive disadvantages in the global shipping market. Furthermore, because Polaris Shipping is based in South Korea, any confirmed breach may trigger specific legal obligations under the Personal Information Protection Act (PIPA).

The exposure of such sensitive information also presents secondary risks to the company's supply chain partners. When a major logistics provider is targeted, the interconnected nature of global trade means that the leak of operational data can impact the security and continuity of various partners within the industry. The N0n group appears to be employing double extortion tactics, a method where attackers not only encrypt a victim's systems but also threaten to leak sensitive data to increase the pressure to pay.

In the transportation and logistics sector, maintaining operational continuity and financial security is paramount. Organizations in this sector often face risks related to the exposure of vessel schedules, client information, and financial transactions. To defend against such threats, companies typically focus on robust data encryption, strict access controls, and continuous monitoring of their networks. While information regarding the N0n group remains limited, the nature of this claim highlights the ongoing threat of ransomware groups targeting critical infrastructure and logistics providers through sophisticated extortion methods.