LowBreach / campaignMonitoring

Black X ransomware group claims attack on Court Square Group

RansomLook reports that the black x ransomware group listed Court Square Group on its leak site; the claim is unverified, so monitor official statements.

Published
Exploitation
No confirmed evidence; this is only a leak-site claim reported by RansomLook, and the victim has not confirmed it

What happened

According to RansomLook, the black x ransomware group claims Court Square Group on its leak site. RansomLook’s headline, dated 2026-11-09, says the company was “claimed by the black x ransomware group on its leak site” (RansomLook).

Only the headline could be retrieved. The full article could not be reviewed. This advisory therefore rests on one claim-tracker headline, and the following are not confirmed:

  • Whether Court Square Group has confirmed an incident. No source says it has.
  • Whether any data was stolen or systems encrypted.
  • The volume or type of any data involved.
  • The entry point or method of any intrusion.
  • Any independent verification of the claim.

A leak-site listing is a claim by the group, not proof of a breach.

Am I affected?

Not confirmed. The headline names only Court Square Group as the claimed victim. It gives no detail on affected customers, employees, systems or data. If you have a relationship with the company, the only reliable answer will come from the company itself.

What to do now

  1. Look for an official statement or notice from Court Square Group, and rely on it over the leak-site claim.
  2. If the company contacts you, verify the message through a channel you already trust, not through links in unsolicited emails or messages.
  3. Re-check this advisory if a source later reports confirmation, scope or technical detail. None is available now.

Sources