VULNpocalypse
LowBreach / campaignMonitoring

n0n ransomware group claims Company #120, a US data analytics and AI firm

The n0n ransomware group claims Company #120, a US data analytics and AI services firm, on its leak site. Customers should wait for a vendor notice.

Published
Exploitation
No, only an unverified leak-site listing tracked by RansomLook, with no confirmation from the victim

What happened

According to the claim tracker RansomLook, the n0n ransomware group listed an entry titled “Company #120” on its leak site on 2026-11-03. RansomLook describes the entry as “data analytics and AI services” in the United States.

The same RansomLook page shows a later post dated 2026-11-06, titled “Scry Analytics,” with the same description: data analytics and AI services, United States. RansomLook does not say whether the two entries refer to the same company, so that link is not confirmed.

The following details are not confirmed:

  • The identity of the company behind the “Company #120” entry.
  • Whether any data was taken or systems were encrypted.
  • How the group got in, and how much data is involved.
  • Whether the victim has acknowledged the incident. No source says it has.
  • Whether the claim is true. No independent outlet has verified it.

Am I affected?

Not confirmed. RansomLook lists this entry under an anonymised title. Its only details are the sector and country: data analytics and AI services in the United States, per RansomLook. Those details alone do not show whether your organisation or a supplier is involved.

What to do now

  1. Do not treat the leak-site listing as confirmation of a breach.
  2. If you use a US data analytics or AI services provider, watch for a direct notice from that provider.
  3. Check the RansomLook n0n group page for any update to this entry.

Sources