Rhysida ransomware group claims Pope and Johnson County Title Company
Rhysida lists Pope and Johnson County Title Company on its leak site, unconfirmed; customers should watch for phishing and verify wire instructions.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- No, only a leak-site claim listed by RansomLook, not confirmed by the company or independently verified
What happened
The rhysida ransomware group claims an attack on “Here at Pope and Johnson County Title Company” and lists it on its leak site, according to the claim tracker RansomLook, which recorded the entry on 2026-11-03.
A leak-site listing is a claim by the group, not proof. The company has not confirmed an incident in the available sources, and no independent outlet has verified it. The entry point, any data involved, its volume, and whether systems were encrypted are not confirmed. Only the headline could be reviewed. The full tracker page could not be read.
Am I affected?
Not confirmed. The sources do not say what data, if any, is involved, or which customers or partners might be affected. If you have done business with Pope and Johnson County Title Company, treat the claim as a reason to stay alert, not as evidence that your data was exposed.
What to do now
- Treat unexpected emails, calls or texts that mention the company or a pending transaction with caution.
- Before sending any funds, confirm wire or payment instructions by phone using a contact number you already have, not one from a new message.
- Watch for official notice from the company and check back for updates.