VULNpocalypse
LowBreach / campaignMonitoring

Scry Analytics claimed by n0n ransomware group on its leak site, per RansomLook

The n0n ransomware group claims Scry Analytics on its leak site, per RansomLook. The claim is unconfirmed, so customers should await an official notice.

Published
Exploitation
No, not confirmed: only a leak-site listing recorded by RansomLook

What happened

According to the ransomware tracker RansomLook, the n0n ransomware group listed Scry Analytics on its leak site on 2026-11-06. RansomLook describes the listed organisation as “data analytics and AI services” in the United States.

The listing is the group’s claim. It is not proof of an intrusion. The following details are not confirmed:

  • Whether Scry Analytics has confirmed an incident. No statement from the company appears in the sources.
  • Any independent verification of the claim.
  • How attackers got in.
  • What data, if any, was taken, or how much.
  • Whether systems were encrypted.

RansomLook also shows an unnamed entry, “Company #120”, dated 2026-11-03 with the same sector and country description (RansomLook). It is not confirmed whether that entry refers to the same organisation.

Am I affected?

Not confirmed. The sources do not name any affected products, services, customers or data types. Organisations that use Scry Analytics services or share data with the company may want to follow the company’s communications. No source states that customers are affected.

What to do now

  1. Treat the leak-site listing as a claim, not a confirmed breach.
  2. Watch for an official statement or notification from Scry Analytics.
  3. If you share data or credentials with Scry Analytics, contact them through your usual channel and ask whether your account or data is in scope.
  4. Check the RansomLook n0n page for changes to the listing.

Sources