LowBreach / campaignMonitoring

Vortex ransomware group claims Scripps on its leak site, per RansomLook

RansomLook reports the vortex ransomware group lists Scripps on its leak site; the claim is unverified, so check for official Scripps notices.

Published
Exploitation
Not confirmed. The only source is a leak-site listing tracked by RansomLook, and it gives no exploitation evidence.

What happened

According to RansomLook, a ransomware claim tracker, the vortex ransomware group lists Scripps on its leak site, in an entry dated 2026-11-09 (RansomLook: Scripps: claimed by the vortex ransomware group on its leak site).

Only the headline of that entry could be fetched, so the full article could not be reviewed. This advisory rests on the headline alone and adds no detail beyond it.

Not confirmed, because the headline does not say:

  • Whether Scripps has acknowledged or confirmed any incident.
  • Which Scripps organization is meant.
  • Whether any data was taken or systems were encrypted.
  • How the group would have gained access.
  • Whether any data has been published.

The listing is the group’s own claim, as relayed by RansomLook, and no independent verification is shown in the source.

Am I affected?

Not confirmed. The headline gives no detail on affected systems, data, people or products.

What to do now

  1. Check for official notices from Scripps, such as a statement or regulatory filing, before drawing conclusions.
  2. If you have a relationship with Scripps, treat any message that cites this claim and asks for credentials or payment with caution, and verify it through channels you already trust.
  3. Revisit this advisory if Scripps or another source confirms or denies the claim.

Sources