A ransomware group calling itself Falcon claims to have carried out an attack against DistributionNOW (DNOW Inc.), according to a listing posted on the group’s own dark-web leak site. The claim, dated August 30, 2026, was tracked and archived by ransomware.live, a security research platform that monitors ransomware groups’ public leak sites. At this time, this is solely an unverified claim made by the criminal group itself — DistributionNOW has not issued any public confirmation, and no regulator has confirmed an incident.
What we know — and don’t
- A group calling itself Falcon posted a claim referencing DistributionNOW (DNOW Inc.) on its leak site, with a claimed date of August 30, 2026.
- DistributionNOW operates in the industrial distribution sector, categorized here as ‘other’ based on its business activity.
- The specific data types the group claims to have obtained have not been disclosed in the listing and have not been independently confirmed by any party.
- No official statement from DistributionNOW or any regulatory body has been issued acknowledging this claim as of this writing.
- Claims made on ransomware leak sites are not independently verified and can sometimes be exaggerated, recycled, or false.
What should you do if you have an account with this company?
- Change your password for any account associated with DistributionNOW, and avoid reusing that password elsewhere.
- Enable two-factor authentication (2FA) wherever it is offered, particularly on email and financial accounts.
- Be cautious of unexpected emails, texts, or calls claiming to be from DistributionNOW or related vendors, especially those asking for personal or payment information.
- Monitor your financial statements and credit reports for any unfamiliar activity.
- Consider using a service like a service like Aura or LifeLock to monitor for signs that your personal information may be circulating or misused.
- Keep an eye on official communications from DistributionNOW for any updates regarding this claim.
BreachLetter will update this article if DistributionNOW confirms this incident, if new information becomes available, or if the matter is officially reported to data protection or regulatory authorities.