Incident
Published 2026-10-11
Verified 2026-10-13

N0n ransomware leak-site claim: "Company #27", described as a neurology practice in New South Wales — ransomware.live discovered 11 Oct, pending exposure listed for 13 Oct 12:37 UTC; identity and breach unverified

ransomware.live lists "Company #27" under the N0n ransomware group, discovered 2026-10-11 14:23 UTC with an estimated attack date of 11 October 2026. The listing describes the target as a neurology practice in New South Wales, Australia (healthcare sector) and carries a pending-exposure notice timed for 2026-10-13 12:37 UTC. The name on the leak site is a placeholder, so the practice is not identified. No organisation confirmation, patient-count, sample files or regulator notice was found this pass (Webber list, ABC topic and iTnews scan). N0n is flagged on the tracker as an emerging group, so treat the claim with caution until the practice, AFP or OAIC publishes. Australian healthcare practices remain high-value targets for double-extortion crews; keep offline tested backups, MFA on remote access, and a ready breach-notification plan. Primary: ransomware.live victim page; secondary: ransomware.live Australia country feed / CISO AI brief.

Exploited in Australia?
unknown
Patch to
Healthcare practices: verify offline backups, enforce MFA on remote access and email, and have an OAIC notifiable-data-breach playbook ready. Patients: treat unexpected emails or calls citing a neurology-practice breach as likely social engineering until your clinic writes to you directly.

Primary: ransomware.live — Company #27 / N0n (discovered 11 Oct 2026; pending exposure 13 Oct 12:37 UTC) · ransomware.live — Australia victims listing (N0n / Company #27 neurology practice NSW)

australia