Black X ransomware group claims DomusVi on its leak site

What happened

According to RansomLook, in a headline dated 2026-11-09, DomusVi was “claimed by the black x ransomware group on its leak site” (RansomLook). A leak-site listing is the group’s claim, not proof of an intrusion.

Only this headline could be fetched. The full article was unreadable, so it could not be reviewed. The following are not confirmed:

• Whether DomusVi has confirmed or denied the claim: not confirmed.
• Whether any data was stolen or systems were encrypted: not confirmed.
• The entry point, the volume or type of data, and any ransom demand: not confirmed.
• Independent verification: none found in the source provided.

Am I affected?

Not confirmed. The source says only that the group lists DomusVi on its leak site. It does not say what data may be involved or who could be affected. No CVE, product vulnerability or affected software version is named.

What to do now

1. Check DomusVi’s official channels for a statement confirming or denying the incident.
2. If you are a DomusVi customer, partner or employee, treat unexpected emails or calls that mention this claim with caution, and verify them through official contact details.
3. Do not search for or download material from leak sites. Wait for confirmation from the organisation.
4. Revisit this advisory when a primary source or the victim publishes details.

Sources

• RansomLook: DomusVi: claimed by the black x ransomware group on its leak site