Chartboost LLC Data Breach: N0n Ransomware Claim (Nov 2026)
Summary
In the latest cybersecurity news, Chartboost LLC — an organization based in US — has fallen victim to a ransomware attack conducted by the group N0n. This data breach, discovered on 2026-11-06T10:53:06.138280+00:00, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.
Incident Report
| Attribute | Information |
|---|---|
| Target Organization | Chartboost LLC |
| Threat Group | N0n |
| Summary | mobile advertising · United States | The internal business records of a mobile advertising network: monthly publisher account balance and earnings snapshots covering 185,545 accounts, January 2018 through September 2026; Advertiser and publisher performance reports from its data warehouse, 1,129,048,884 rows naming 14,497 advertiser companies and 43,211 publisher companies with their impressions, clicks, installs, spend and earnings; Marketplace transaction records with auction and bid pricing, including one complete week of the marketplace transaction archive at 293 GB uncompressed; An app user device event archive of 35,044,897 events carrying advertising identifiers, IP addresses and device details, plus device identity mapping records for 657,625,935 identifiers and 808,273,514 user app activity rows; Fraud investigation records naming investigated publisher companies | [NOT PAID — EXPOSED] |
| Date of Breach | 2026-11-06T10:52:50.218677+00:00 |
| Discovery Date | 2026-11-06T10:53:06.138280+00:00 |
| Region | US |
| Business Sector | Technology |
How to reduce your ransomware risk
Most ransomware intrusions start with a stolen password or a phishing email. A few proactive steps sharply cut your exposure:
- dark web monitoring — close the gap attackers exploit.
- data breach monitoring — close the gap attackers exploit.
Want to know if you’re already exposed? Run a free scan with the HookPhish data breach checker.
Disclaimer
HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.
