N0N CYBER EXTORTION INCIDENT INVOLVING 38 MARITIME COMPANIES LIKELY TRACES BACK TO A SINGLE VENDOR

Summary from the TLDR InfoSec newsletter

The n0n extortion group listed 38 maritime organizations across 18 countries on its leak site, demanding roughly $1.22 billion combined, including $400 million from Ocean Network Express. Cydome's interim and unconfirmed analysis linked the batch to a single support archive tied to Korean maritime software vendor CyberLogitec, since at least 21 victims were documented customers and sample files referenced its OPUS and ALLEGRO products. The samples pointed to credentials, EDI traffic, and system documentation dating back to 2009, though one sample reused across two listings suggested that being named did not always mean an organization's own data was taken.