Solid Trading B.V. listed on N0n ransomware leak site

• Ransomware group: N0n
• Country: Netherlands
• Announcement date: October 18, 2026

N0n ransomware group targets Solid Trading B.V.

The threat actor known as N0n has listed the Netherlands-based organization Solid Trading B.V. on its dedicated leak site. This announcement, made on October 18, 2026, indicates a potential data breach involving the institution. The group claims to be in possession of the organization's data and has threatened to expose this information publicly if their ransom demands are not met. At this time, information regarding the specific identity and background of the N0n group remains limited.

Ransomware attacks of this nature often follow a double extortion model. In such scenarios, threat actors do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data. The attackers then use the threat of leaking this stolen information on public forums or dedicated leak sites to pressure the victim into paying a ransom. This tactic significantly increases the pressure on the target, as the consequences of non-payment shift from operational downtime to permanent reputational and legal damage through public exposure.

Claims regarding the data breach

The N0n ransomware group claims to have acquired a vast array of sensitive information belonging to Solid Trading B.V. The alleged data includes highly sensitive financial and operational records that could impact the firm's entire ecosystem. According to the group's announcement, the stolen information consists of the following:

• Client trading records
• Platform user password hashes
• Financial data
• Session credentials

Beyond these broad categories, the group alleges that the stolen data contains specific details such as live client trading records, order and execution data, and account identifiers. Furthermore, the claim includes the company database, platform user password hashes, credit limits, clearing paths, and fee schedules. The list of alleged stolen information also extends to FIX venue session configurations, liquidity provider credentials, trade history, and bank matching audit records.

Potential risks and implications

The alleged leak of such sensitive information poses significant financial and operational risks to the clients and partners of Solid Trading B.V. The exposure of password hashes and session credentials, specifically those belonging to liquidity providers, is particularly concerning as it could potentially lead to secondary attacks or unauthorized access attempts against interconnected systems. Such a scenario highlights the interconnected nature of modern financial networks, where a single breach can create ripple effects across the supply chain.

Given the organization's location in the Netherlands, this incident may trigger mandatory data breach notification requirements under the European Union's General Data Protection Regulation (GDPR). The sensitivity of the alleged data could lead to severe reputational damage and potential legal consequences for the institution. Furthermore, because the firm operates within the financial technology sector, the leaked data could potentially be utilized by malicious actors to facilitate supply chain attacks, targeting the broader financial infrastructure through the compromised entity.

To defend against such threats, organizations in the financial technology sector typically implement layered security strategies. These include robust encryption for data at rest and in transit, multi-factor authentication to mitigate the risk of compromised credentials, and continuous monitoring of network traffic to detect unauthorized data exfiltration. Additionally, maintaining strict access controls and conducting regular audits of session configurations and liquidity provider credentials are essential steps in reducing the attack surface and minimizing the potential impact of a breach.