Ransomware group N0n hits Chartboost LLC
Chartboost LLC — a technology target operating in US has been listed by the N0n ransomware group on 2026-11-06. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Chartboost LLC |
|---|---|
| Threat Group | N0n |
| Summary | Chartboost LLC, a technology organization in the United States, was listed by the N0n ransomware group on its leak site on 2026-11-06. |
| Date of Breach | 2026-11-06 |
| Discovery Date | 2026-11-06 |
| Region | US |
| Target Domain | — |
| Business Sector | Technology |
| Severity | MEDIUM |
Claim by N0n
mobile advertising · United States | The internal business records of a mobile advertising network: monthly publisher account balance and earnings snapshots covering 185,545 accounts, January 2018 through September 2026; Advertiser and publisher performance reports from its data warehouse, 1,129,048,884 rows naming 14,497 advertiser companies and 43,211 publisher companies with their impressions, clicks, installs, spend and earnings; Marketplace transaction records with auction and bid pricing, including one complete week of the marketplace transaction archive at 293 GB uncompressed; An app user device event archive of 35,044,897 events carrying advertising identifiers, IP addresses and device details, plus device identity mapping records for 657,625,935 identifiers and 808,273,514 user app activity rows; Fraud investigation records naming investigated publisher companies | [NOT PAID — EXPOSED]
Posted by the N0n threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Leak post (onion / Tor)
http://nongzecboljwv3yfndkggsybsglfrkffw7bvk2zemuteoxe6etpusnad.onion#v-chartboost
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.