Ransomware group N0n hits TOPLIVO AD
TOPLIVO AD — a energy & utilities target operating in BG has been listed by the N0n ransomware group on 2026-10-25. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | TOPLIVO AD |
|---|---|
| Threat Group | N0n |
| Summary | TOPLIVO AD, a energy & utilities organization in Bulgaria, was listed by the N0n ransomware group on its leak site on 2026-10-25. |
| Date of Breach | 2026-10-25 |
| Discovery Date | 2026-10-25 |
| Region | BG |
| Target Domain | — |
| Business Sector | Energy & Utilities |
| Severity | MEDIUM |
Claim by N0n
fuel trading and construction materials · Bulgaria | The complete counterparty ledger of a fuel trading company: 694 companies with full legal names, addresses, managing persons, national company numbers, tax numbers and bank account details; More than 3,100 live customs and fuel movement documents from December 2025 through October 2026, and a 12 year archive of more than 46,000 documents from 2014 through 2025; Records of 611 drivers and 651 tanker trucks with registration plates; More than 2.6 million automated tank gauge readings from fuel storage tanks; Named staff accounts of the accounting system | [NOT PAID — EXPOSED]
Posted by the N0n threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Leak post (onion / Tor)
http://nongzecboljwv3yfndkggsybsglfrkffw7bvk2zemuteoxe6etpusnad.onion#v-toplivo
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.