Ransomware Group N0n Hits: PayPal support operations (Transcom WorldWide)
Summary
In the latest cybersecurity news, PayPal support operations (Transcom WorldWide) — an organization based in SE — has fallen victim to a ransomware attack conducted by the group N0n. This data breach, discovered on 2026-09-18T15:27:18.196030+00:00, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.
Incident Report
| Attribute | Information |
|---|---|
| Target Organization | PayPal support operations (Transcom WorldWide) |
| Threat Group | N0n |
| Summary | Outsourced customer support / financial services · Netherlands / Tunisia | 86.7M connection records: daily support-agent sessions into PayPal corporate Citrix/AAA systems; Complete infrastructure map: internal AD, PKI, Netskope/Zscaler tenants, all 8 sites | All 8 sites are enforcing a network blackout until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC] |
| Date of Breach | 2026-09-18T15:27:02.291248+00:00 |
| Discovery Date | 2026-09-18T15:27:18.196030+00:00 |
| Region | SE |
| Target Domain | transcom.com |
| Business Sector | Financial Services |
How to reduce your ransomware risk
Most ransomware intrusions start with a stolen password or a phishing email. A few proactive steps sharply cut your exposure:
- realistic phishing tests — close the gap attackers exploit.
- train staff to spot attacks — close the gap attackers exploit.
Want to know if you’re already exposed? Run a free scan with the HookPhish data breach checker.
Disclaimer
HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.
Related articles
Ransomware Group Gammax Hits: Premier Lighting and Controls
Ransomware Group securotrop Hits: Prefix Corp
