LowBreach / campaignMonitoring

Vortex ransomware group claims attack on BOZZUTO, per RansomLook

RansomLook reports the vortex ransomware group listed BOZZUTO on its leak site; the claim is unconfirmed, so await an official statement.

Published
Exploitation
Not confirmed. The only source is a headline reporting a leak-site listing tracked by RansomLook, and it contains no evidence of exploitation.

What happened

According to RansomLook, the vortex ransomware group claims BOZZUTO on its leak site. The headline is dated 2026-11-09. A leak-site listing is a claim by the group, not proof of an attack.

The headline says nothing about a response from BOZZUTO, and no confirmation from the company was available in the sources we could review. Only the headline could be retrieved, and the full article could not be reviewed. The following are not confirmed:

  • whether an attack took place
  • how an attacker might have gained access
  • what data, if any, was taken
  • whether any systems were encrypted or disrupted

Am I affected?

Not confirmed. The headline does not say what data or systems are involved, and no technical details such as CVEs, affected software or indicators appear in what we could read. Nothing in the source shows an impact on any customer, partner or employee of BOZZUTO.

What to do now

  1. Check for an official statement from BOZZUTO. None was available in the sources reviewed.
  2. If you are a BOZZUTO customer, partner or employee, use your normal contact with the company for questions, and do not rely on the leak-site listing alone.
  3. Check this page again if a source later confirms or disputes the claim. We will update it only with sourced facts.

Sources