Ransomware needs a way in. Stolen credentials are the cheapest one.

Amagi Media Labs Ransomware Attack

Ransomware victimRansomed

n0nGroup

United StatesCountry

Oct 18, 2026Discovered

Overview

View group profile

Industry

Technology

Country

United States

Discovered

about 10 hours ago

Attack date

Oct 18, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

n0n

Total victims

First seen

Sep 2026

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

Threat level

4.2/10

Aggressiveness10/10

Lethality0.1/10

Criticality2.2/10

Status breakdown

Data Leaked1.2%1

Negotiating1.2%1

Claimed

this victim

97.5%79

Targeted sectors

Education Energy & Utilities Financial Services Healthcare Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Technology

Known target sector

Country

United States

Frequently targeted country

Other victims

View all (81)

Same group · n0n

Finzly Corp
United States
Claimed
Amagi Media Labs
United States
Claimed
Telecom Egypt
Egypt
Claimed
All Business Technologies (Fox Hill bookkeeping and tax practice)
—
Claimed
SMIC US Company (Sunnyvale, CA — US arm of Semiconductor Manufacturing International Corpo...
United States
Claimed
Solid Trading B.V.
Netherlands
Claimed

Group activity

Monthly attacks · n0n

total · avg 40.5/mo