Santos Brasil Appears in N0n Leak Claims
Ransomware.live and other sources listed Santos Brasil as a presumed N0n victim. The attribution remains unconfirmed.
Ransomware.live listed Santos Brasil, a company tied to port operations in Brazil, as a presumed victim of the emerging N0n group. The entry cites exposed terminal operating system database scripts and operational logs, but says the claim should be treated with caution until independently verified.
What did SecurityArsenal say about N0n's campaign?
SecurityArsenal reported that N0n posted a wave of claims on its leak site with an unusual concentration in maritime transport, port operations, container shipping, and logistics. The analysis notes that those claims were observed by a second crawler, but that does not confirm the organizations were actually compromised.
The same source included Santos Brasil among the organizations whose alleged intrusion was claimed by N0n. It also said the wave covered entities in several countries linked to the global maritime supply chain, though it did not provide any additional specific evidence about the data attributed to the Brazilian company.
What do CISO AI and FalconFeeds.io add?
CISO AI described a wave of 38 organizations added to n0n's leak site and interpreted it as a possible shift toward sector concentration in maritime transport and logistics. That text attributes to SOCRadar a profile suggesting the group uses credentials obtained through infostealers and administrative tools, but that does not show those techniques were used against Santos Brasil.
FalconFeeds.io, meanwhile, listed Santos Brasil alongside other Brazilian port and maritime companies, including Portonave and Super Terminais, as part of a supposed batch of 32 new n0n victims. The available result is a social media post and does not include confirmation from the affected companies.
Taken together, these reports place Santos Brasil within a campaign that several sources link to the maritime and logistics sector, but the level of verification remains uneven. In the case of the Brazilian company, the sources reviewed support the attribution with different degrees of caution and do not provide independent official confirmation.
Ransomware.live listed Santos Brasil, a company tied to port operations in Brazil, as a presumed victim of the emerging N0n group. The entry mentions exposed terminal operating system database scripts and operational logs, but warns that the claim should be treated cautiously until independently verified.
What did SecurityArsenal say about N0n's campaign?
SecurityArsenal reported that N0n posted a wave of claims on its leak site with an unusual concentration in maritime transport, port operations, container shipping, and logistics. The analysis says those claims were observed by a second crawler, but that does not confirm the organizations were compromised.
The same source included Santos Brasil among the organizations whose alleged intrusion was claimed by N0n. It also said the wave covered entities in several countries connected to the global maritime supply chain, though it did not add specific evidence about the data attributed to the Brazilian company.
What do CISO AI and FalconFeeds.io add?
CISO AI described a wave of 38 organizations added to n0n's leak site and read it as a possible shift toward sector concentration in maritime transport and logistics. That text attributes to SOCRadar a profile saying the group would use credentials obtained through infostealers and administrative tools, but that does not show those techniques were used against Santos Brasil.
FalconFeeds.io, meanwhile, listed Santos Brasil alongside other Brazilian port and maritime companies, including Portonave and Super Terminais, as part of a supposed batch of 32 new n0n victims. The available result is a social media post and does not include confirmation from the affected companies.
Taken together, these reports place Santos Brasil within a campaign that several sources link to the maritime and logistics sector, but the level of verification remains uneven. In the case of the Brazilian company, the sources reviewed support the attribution with different degrees of caution and do not provide independent official confirmation.
Sources
- Victim: Santos Brasil (port operations)ransomware.live· Ransomware.live
- n0n Extortion Group Targets Global Shipping, Listing 38 Port and Logistics Organisationscisoai.au· CISO AI
- Brasil registra aumento de 14,8% nos casos de Ransomware em setembro, na contramão de queda globalgazetadasemana.com.br· Gazeta da SemanaUnverified URL
- N0N Ransomware Gang Claims 50 Victims in Coordinated Maritime and Logistics Leak Site Campaignsecurityarsenal.com· SecurityArsenal
- Publicación sobre la oleada de presuntas víctimas de n0nx.com· FalconFeeds.io
