GNCNet / DGT Busan Data Breach
Ransomware claim involving GNCNet / DGT Busan
Published: Oct 12, 2026 N0n
Threat Level
High
Confidence: High
Quick Summary
- Company
- GNCNet / DGT Busan
- Industry
- Manufacturing
- Threat Actor
- N0n
- Date of Incident
- Oct 12, 2026
Executive Summary
N0n listed GNCNet / DGT Busan on its leak site on October 12, 2026. This South Korea-based Transportation operator is one of 72 victims the group claimed in the preceding sixty days. Stealer-log queries returned no matching records for this organization. GNCNet / DGT Busan has not issued a public statement. N0n’s sixty-day victim set clusters in Transportation, Technology, and Healthcare, with the geographic center of gravity in the US, South Korea, and Brazil, indicating that South Korean operators are squarely in the primary target zone. The October 12 maritime wave also named Ocean Network Express (Singapore), CULines (China), T.S. Lines (Taiwan), and ZPMC (China, Manufacturing).
Technical Analysis
No records matching GNCNet / DGT Busan’s operational domains appeared in accessible stealer-log repositories. Other organizations from the same October 12 batch showed significant credential exposure, which suggests the null result here reflects query coverage gaps rather than N0n’s actual reach. Credentials may exist in private markets or stealer families not captured in indexed repositories. The null result does not rule out a compromise. GNCNet / DGT Busan should conduct an internal credential audit, review authentication logs for the period around October 12, and enforce phishing-resistant MFA on all remote-access and identity systems.
Disclaimer
This report is intended for threat intelligence and security awareness purposes. SOCRadar does not host, redistribute or buy stolen data. All breach information reported here is collected from publicly accessible threat actor and ransomware portals. This content is intended to equip CTI teams with context around recent attacks. While we strive for accuracy, listings on ransomware leak and extortion sites cannot always be independently verified and may not reflect confirmed breaches. If you believe any data in this report is incorrect, please contact us.
Share