VULNpocalypse
LowBreach / campaignMonitoring

Payoutsking ransomware group claims iLending and J.C. Flowers & Co. attack

RansomLook reports the payoutsking ransomware group claims iLending and J.C. Flowers & Co. on its leak site, so wait for official notices.

Published
Exploitation
No, not confirmed: the only evidence is a leak-site listing reported by a claim tracker

What happened

The claim tracker RansomLook reports that the payoutsking ransomware group added a post titled “iLending & J.C. Flowers & Co.” to its leak site on 2026-11-03. The listing is the group’s claim. It does not prove that an attack took place.

RansomLook shows that the group describes itself as “Payouts King Group.” According to that description, the group says it is not a ransomware-as-a-service operation, does not accept affiliates and uses the Tox messaging protocol (RansomLook).

The following points are not confirmed:

  • iLending and J.C. Flowers & Co. have not confirmed an incident in the provided sources.
  • No independent outlet has verified the claim.
  • The entry point and timing are not known. It is also not known whether any data was taken or encrypted.
  • The source does not explain how the two named organisations are related within the listing.

Am I affected?

Not confirmed. The source names no affected systems, data types, customers or products. People who work with iLending or J.C. Flowers & Co. cannot tell from this listing alone whether their information is involved.

What to do now

  1. Watch for direct notices or public statements from iLending or J.C. Flowers & Co., and treat those as the authoritative source.
  2. Be cautious with unexpected messages that mention this claim. Verify them through known contact channels before you respond.
  3. Do not search for or download any files the group may post.
  4. Check back for updates. This advisory will change if the companies or independent outlets report new facts.

Sources