The n0n ransomware group listed FinSoft (Kolibri retail back-office software) on its data leak site on 2026-09-22. Country: UZ Sector: Retail & E-Commerce Claim as published on the leak site: Retail software vendor / IT services · Uzbekistan | Client databases of 10+ retail chains (keddo, marc, lancaster, comf_rus, ek, cr, bas_at, bas_juk, bas_nov, bas_zar): sales, stock, pricing, financial records; Back-office platform and API service data | One client database publishes per day after the deadline, starting with keddo. Their clients will know exactly whose software failed them. | [ACTIVE: deadline 2026-09-25 01:06 UTC]
FinSoft (Kolibri retail back-office software) listed by n0n ransomware group
- Group
- n0n
- Sector
- Retail & E-Commerce
- Country
- Uzbekistan
- First seen
- 22 September 2026
This is a claim published by the threat group itself and has not been independently verified. OffSet7 does not host or link to any leaked data.
Monitor your company and suppliers
Get an alert the moment a ransomware group names your company or one of your suppliers.