n0n extortion group used an AI coding agent against at least 23 organizations
What happened
SOCRadar found the exposed server of an extortion operator known as n0n and reports that the operator used the OpenCode coding agent with many models to write and debug attack scripts. At least 23 organizations in 14 countries were implicated, and where the group did not encrypt, it destroyed data and backups after stealing it.
SOCRadar found a file server exposing the operator's working directory, with 1,719 files from two snapshots taken on 25 and 26 September. Of the 23 organizations implicated, 15 were posted on the group's leak site, four were compromised but not posted and four saw access attempts with no outcome. The campaign targeted 305 FortiGate SSL-VPN appliances with credential stuffing through residential proxies. The operator used OpenCode configured with 154 model entries, and spending on the AI gateway passed 7,216 dollars by 22 October. SOCRadar describes a human-directed operation supported by AI and observed no fully autonomous attack system.
How it happened
Supply chain and access: Stolen token or key. Stolen or leaked access tokens, API keys or passwords were used to get in.
Models from several AI vendors were involved. The product was OpenCode, which is open source, a type of coding assistant.
Impact
Data was both exposed and destroyed. Data involved: unknown. Many organizations were affected.
Severity is rated High, calculated from how far the incident reached and how sensitive the data was.
Was the AI at fault?
No. The failure was in the systems, settings or people around the AI, not in the model's behaviour.
Status and timeline
Confirmed by the affected organization, the AI vendor, a regulator or a named security research firm.
It became public on 28 Oct 2026.