VULNpocalypse
LowBreach / campaignMonitoring

Ornico named by ransomware group on its leak site, claim unconfirmed

RansomLook reports a ransomware group listed Ornico on its leak site; the claim is unconfirmed, so watch for official statements from Ornico.

Published
Exploitation
Not confirmed. The only source is a leak-site claim tracker listing, with no victim confirmation or independent verification.

What happened

According to RansomLook, a ransomware group it calls “global secret group” listed Ornico on its leak site. The tracker’s entry is dated 2026-11-09 RansomLook. This is the group’s claim as relayed by a tracker. It is not proof of an attack.

Only the headline could be retrieved. The full article could not be reviewed, so this advisory contains no detail beyond it.

Not confirmed:

  • Whether Ornico has acknowledged an incident. The sources do not say it has.
  • Whether any data was taken or systems were encrypted.
  • The entry point, the volume of data and the date of any intrusion.
  • Any independent verification. No independent outlet carrying this story was found.

Am I affected?

Not confirmed. The source names only Ornico as the listed organisation. It does not say which customers, partners or data, if any, are involved. If you do business with Ornico, the only sourced position is that a group has claimed it, and Ornico has not confirmed anything in the material reviewed.

What to do now

  1. Check Ornico’s official channels for a statement and follow any guidance it issues. No such statement is confirmed in the sources.
  2. If you are an Ornico customer or partner, ask your Ornico contact whether you are affected, rather than relying on the leak-site listing.
  3. Revisit this advisory if Ornico or an independent outlet confirms or disputes the claim.

Sources