N0n Claims FinSoft Kolibri Data Compromise, Threatens Daily Leak
Summary
The N0n ransomware group claims it compromised FinSoft’s Kolibri platform and accessed data from more than 10 retail chains. It threatens to publish one client database per day after a September 25 deadline; the claims are unconfirmed.
Key points
- The N0n group claims to have compromised FinSoft’s Kolibri retail back-office software.
- The group alleges access to client databases and platform/API data for more than 10 retail chains.
- Claimed data includes sales, stock, pricing, and financial records.
- N0n threatens to publish one client database daily after its September 25, 2026 deadline, starting with keddo.
- The report says the claims are based on the group’s public statements and have not been independently confirmed.
Article Details
- Victim
- FinSoft
- Claim Date
- 2026-09-22
- Encryption Status
- Not disclosed
- Exfiltration Status
- Not confirmed; the group claims client databases and platform/API data were affected.
- Exfiltrated Data
- The group claims the data includes client databases from 10+ retail chains, sales, stock, pricing, financial records, and back-office platform/API data.
- Leak Status
- The group threatens to publish one client database per day after its stated deadline, starting with keddo; publication is not confirmed.