The n0n ransomware group listed PayPal support operations (Transcom WorldWide) on its data leak site on 2026-09-18. Country: SE Sector: Financial Services Domains named: transcom.com Claim as published on the leak site: Outsourced customer support / financial services · Netherlands / Tunisia | 86.7M connection records: daily support-agent sessions into PayPal corporate Citrix/AAA systems; Complete infrastructure map: internal AD, PKI, Netskope/Zscaler tenants, all 8 sites | All 8 sites are enforcing a network blackout until settlement. | [ACTIVE: deadline 2026-09-21 03:01 UTC]