The ransomware group N0n has claimed Staples Inc and SBD Inc as a new victim, alleging it exposed retail and shopper data from the office supply company. The claim is unverified, and Staples has not confirmed any breach.

Threat intelligence trackers reported the listing on 7 November 2026, after it appeared on the group's leak site. The listing was discovered at 10:54 UTC on the same day, and its status is shown as "NOT PAID — EXPOSED". A leak-site listing is an allegation, not independent confirmation that an attack took place or that data was stolen.

According to the reports of the listing, the material allegedly exposed includes 381,964 records from a single daily file containing per-product profit margin information, and unit sales and revenue data for 64,041 products. The listing is also reported to include shopper activity logs containing IP addresses, search terms and device information, shopper chat transcripts including a callback phone number, and a staff directory with names and email addresses for close to 200 employees.

The reports also say the listing includes a pasted table described as containing 30 Social Security numbers with dates of birth. The authenticity of that material has not been independently confirmed, and no values from it have been published in the reporting.

The reports do not establish a technical root cause, an affected-user count, or any system compromise, and they do not verify that the named data belongs to either company or was obtained through unauthorised access. Threat trackers record more than 100 victims listed by N0n since September 2026, but that history does not confirm this claim. Until Staples or an independent investigation confirms it, the Staples listing should be treated as an unverified ransomware claim.

[Source: undercodenews.com](https://undercodenews.com/n0n-ransomware-group-claims-staples-inc-and-sbd-inc-as-new-victims-in-latest-november-7-disclosure-video/) | [Source: qpulse.quasarcybertech.com](https://qpulse.quasarcybertech.com/news/7981/n0n-ransomware-group-claims-data-exfiltration-from-staples-inc-sbd-inc)