VULNpocalypse
LowBreach / campaignMonitoring

Deadlock ransomware group claims NoseTea on its leak site, RansomLook reports

The Deadlock ransomware group claims NoseTea on its leak site, per RansomLook, unconfirmed, so NoseTea partners should watch for an official notice.

Published
Exploitation
No, not confirmed: the only evidence is a leak-site listing recorded by RansomLook

What happened

According to the ransomware claim tracker RansomLook, the Deadlock ransomware group has listed NoseTea on its leak site. RansomLook recorded the listing on 2026-11-08.

A leak-site listing is a claim by the group. It does not prove that an attack took place. Only the headline could be reviewed. The full tracker entry could not be read, so no further detail is available here.

Several points are not confirmed:

  • NoseTea has not confirmed an incident in the available sources.
  • No independent outlet has verified the claim.
  • The entry point, the timeline, and whether any data was taken or published are all not confirmed.

Am I affected?

Not confirmed. The sources do not say which systems, data, customers or partners are involved, if any. If you have no relationship with NoseTea, this claim does not affect you.

What to do now

  1. Watch for an official statement or notification from NoseTea.
  2. If you share data or accounts with NoseTea, note what that data covers. You can then respond quickly if NoseTea confirms an incident.
  3. Do not download or share files that are said to come from the leak site.

Sources