THREAT ACTOR
LYNX_
ActiveLYNX is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of LYNX, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2026 61
- 2025 271
- 2024 86
Leak site mirrors
37 mirrors tracked, 18 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
lynxblog.netLynx snapshot · 2025-05-26 17:21 -
lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd.onionLynx snapshot · 2024-08-03 10:10 -
lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd.onionLynx snapshot · 2025-05-09 03:29 -
lynxblog.netLynx snapshot · 2025-05-26 15:05 -
lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad.onionLynx snapshot · 2026-09-23 05:34 -
lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad.onionLynx snapshot · 2026-09-23 05:35 -
lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd.onionsnapshot · 2026-09-23 05:32 -
lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd.onionLynx snapshot · 2026-09-23 05:37 -
lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd.onionLynx snapshot · 2026-09-23 03:20 -
lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd.onionLynx snapshot · 2026-09-23 03:36 -
lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd.onionLynx snapshot · 2026-09-23 04:00 -
lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd.onionsnapshot · 2026-09-23 03:33 -
lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd.onionLynx snapshot · 2026-09-23 05:03 -
lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad.onionLynx snapshot · 2026-09-23 05:34 -
lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad.onionLynx snapshot · 2026-09-23 04:00 -
lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad.onionLynx snapshot · 2026-09-23 05:30 -
lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid.onionLynx snapshot · 2026-09-23 05:21 -
lynxstorage1.netsnapshot · 2025-05-16 22:20 -
lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad.onionLynx snapshot · 2026-09-23 05:39 -
lynxba5y5juv3c4de2bftamjkbxvcuujr5c5wn4hq2fwmt66pxb7qqad.onionsnapshot · 2024-12-11 09:35 -
lynxchat.netLynx snapshot · 2025-05-15 08:19 -
lynxcdnjg43re373nltauhdqfbau25mwawsg42h4lswfe455uaznilad.onionsnapshot · 2026-04-24 13:11 -
lynxad2seqpyu52lr5v7il4idasv23535a46s4bj65b3v7t5y6u5daqd.onionLynx snapshot · 2026-09-22 20:00 -
lynx2m7xz73zpmlm5nddbokk6a55fh2nzjq2r5nk2hbdbk74iddqfiqd.onionLynx snapshot · 2026-09-23 05:38 -
lynxcwuhva6qzlnj3m3qrcl6bgvnxpixg5vsikf53vutdf3ijuv2pxyd.onionLynx snapshot · 2026-09-23 05:20 -
lynxcyys7c2np3b3er2wo6sufwoonmh6i3nykv53pst336c3ml4ycjqd.onionLynx snapshot · 2026-09-23 05:38 -
lynxdehvlvrrtnhtpuy6bhrxffzvl5j7y7p3zl553slzq44lcb2jzkyd.onionLynx snapshot · 2026-09-23 00:28 -
lynxikczcyposxfz5a7hxbqxilsrtx7zdzwmhk5wcb5qoatbv2suizid.onionLynx snapshot · 2026-09-23 05:36 -
lynxroggpujfxy7xnlrz3yknphqgk4k5dy4rhaldgz2hpxyyy3ncuvad.onionLynx snapshot · 2026-09-23 05:33 -
lynxoifh5boac42m6xdoak6ne7q53sz7kgaaze7ush72uuetbnjg2oqd.onionLynx snapshot · 2026-09-23 00:29
Recent victims
The 50 most recent victims claimed by LYNX. Total in the index: 418.
| Date listed | Victim | Description |
|---|---|---|
| 2026-08-29 | cutlercapital | Cutler Capital Management, LLC of Worcester, MA is an investment advis… |
| 2026-08-06 | www.jerryleigh.com | Jerry Leigh is a family-owned women's, men's, and children's clothing … |
| 2026-08-06 | www.talbotdes.org | Talbot County Department of Emergency Services provides essential emer… |
| 2026-06-18 | www.someco.com | Southern Mechanical Contractors is a merit shop mechanical and industr… |
| 2026-06-18 | www.eastersealsia.org | Easterseals Iowa provides an Assistive Technology Program that support… |
| 2026-06-18 | www.wolfconstruction.net | Wolf Construction Services, Inc specializes in commercial wood framing… |
| 2026-06-11 | www.commonwealth-partners.com | CommonWealth Partners Properties specializes in a range of real estate… |
| 2026-05-10 | bayareaherbs.com | Bay Area Herbs & Specialties is a leading supplier of fresh culinary h… |
| 2026-05-10 | jacksoncountyin.com | Jackson County Visitor Center serves as a gateway for travelers seekin… |
| 2026-05-10 | st-annes.uk.com | St Anne's Catholic School & Sixth Form College is a distinguished educ… |
| 2026-05-10 | lifelongaccess.org | Lifelong Access is a dedicated organization that supports individuals … |
| 2026-05-10 | www.kurita.eu | Kurita Europe specializes in advanced water treatment technologies and… |
| 2026-05-10 | ossistemes.com | OS Sistemes is a tech company that helps businesses bring their digita… |
| 2026-05-10 | csb-battery.com | CSB Energy Technology Co., Ltd. is a leading global manufacturer of Va… |
| 2026-05-10 | funkychunky.com | Funky Chunky offers gourmet caramel corn and popcorn snacks, providing… |
| 2026-04-14 | Stonehenge | Stonehenge Co Ltd is a company that operates in the Commercial & Resid… |
| 2026-04-14 | cwwcontractors.com | CW&W Contractors is a leading civil construction contractor specializi… |
| 2026-04-13 | sentrydynamics.com | Sentry Dynamics, Inc. provides a powerful integrated suite of data sol… |
| 2026-04-08 | ACNHealthcare | www.acnhealthcare.com Revenue $253.6 Million We specialize in medica… |
| 2026-04-07 | www.smithdollar.com | Smith Dollar is a Santa Rosa law firm that provides comprehensive lega… |
| 2026-03-26 | njpcs.org | NJ Pain Care Specialists is a leading interventional pain management p… |
| 2026-03-14 | indrub.com | Industrial Rubber Supply is a leading manufacturer and supplier of cus… |
| 2026-03-13 | Keller Polska | Keller Polska, operating for over 20 years, is a leader in the geotech… |
| 2026-03-13 | Africa Insurance | Lion of Africa Insurance Company Ltd is a company that operates in the… |
| 2026-03-01 | https://www.hegelmann.com | Hegelmann Group is a family-run logistics company headquartered in Bru… |
| 2026-02-20 | Altalingua | Altalingua specializes in multilingual technical documentation, primar… |
| 2026-02-20 | Stera Chemicals | Stera Chemicals is a leading distributor of raw chemical materials in … |
| 2026-02-20 | Keylogistics Chile | Keylogistics Chile S A is a company that operates in the Restaurants i… |
| 2026-02-19 | secure.ae | you have 7 days to contact us, after we will publish all your files. |
| 2026-02-17 | gbaco.com | GOFF BACKA ALFERA & COMPANY, LLC is a full-service public accounting a… |
| 2026-02-17 | powersmiller.com | Powers Miller Attorneys At Law is a civil litigation firm based in Nor… |
| 2026-02-17 | structuredassetservices.com | About Structured Asset Funding and 123LUMPSUM -- Located in Hallandale… |
| 2026-02-15 | La Rioja Alta | La Rioja Alta, S.A. is a prominent winery offering a diverse range of … |
| 2026-02-04 | www.trisa.ch | TRISA AG specializes in the development and production of high-quality… |
| 2026-02-03 | peterboroughpublichealth.ca | Lakelands Public Health, formerly known as the HKPR District Health Un… |
| 2026-01-30 | shorelinenyc.com | Shoreline builders continuously raises the bar in excellence, quality … |
| 2026-01-30 | www.roschvisionary.com | Rosch Visionary Systems specializes in software solutions designed spe… |
| 2026-01-19 | Ocean Fish | OceanFish is a leading company in Romania since 1998, specializing in … |
| 2026-01-09 | Grupo Ruiz | Grupo Ruiz is a leading firm in sustainable and innovative mobility wi… |
| 2026-01-07 | Options | Options Community Services Society is a company that operates in the I… |
| 2026-01-06 | www.swautomation.at | sw-wireterminal.com Before we developed our own products, we were… |
| 2026-01-05 | www.sje.vic.edu.au | St Joseph's College Echuca is a Kildare Education Ministries Catholic … |
| 2026-01-05 | www.granosycereales.com.co | Granos y Cereales de Colombia S.A. is a Colombian agro-industrial comp… |
| 2026-01-05 | www.ville-dunkerque.fr | Ville de Dunkerque is focused on the revitalization and transformation… |
| 2026-01-05 | www.blackdogsalvage.com | Black Dog Salvage specializes in the reclamation, repurposing and resa… |
| 2026-01-05 | crawfordorthodontics.net | Crawford Orthodontics |
| 2026-01-05 | www.stcharlesprep.org | St Charles Preparatory School is a company that operates in the Educat… |
| 2026-01-05 | www.mcphillamysgold.com | https://regisresources.com.au Leading Australian gold producer on the… |
| 2026-01-05 | www.mscorp.net | Marine Systems Corporation (MSCorp) specializes in marine engineering,… |
| 2026-01-05 | www.burdettedental.com | Burdette Dental Laboratory, located in Birmingham, Alabama, has over 5… |
CONFIRMED ATTACKS
Lynx confirmed attacks: 60 verified incidents
Ransomnews has verified 60 Lynx incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from July 2024 to May 2026. United States accounts for 33 of them (55%), with victims recorded in 15 countries in total. The most affected sector is manufacturing, at 14 confirmed victims. A ransom payment was publicly confirmed in 0 cases and publicly refused in 4; the outcome is unrecorded in the remaining 56. Where a figure was disclosed (23 cases), these incidents account for 389,572 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Lynx incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| May 2026 | CSB Energy Technology Co., Ltd. | Manufacturing | Taipei, Taiwan | — | Unknown | Source |
| April 2026 | Kurita Europe GmbH | Manufacturing | Mannheim, Germany | — | Unknown | Source |
| March 2026 | St Anne's Catholic School | Education | Southampton, United Kingdom | — | Unknown | Source |
| February 2026 | NJ Pain Care Specialists, LLC | Healthcare | New Jersey, United States | 501 | Unknown | Source |
| February 2026 | Hegelmann Group | Transportation | Bruchsal, Germany | — | Unknown | Source |
| February 2026 | Trisa AG | Manufacturing | Triengen, Switzerland | — | Unknown | Source |
| January 2026 | Lakelands Public Health | Healthcare | Peterborough, Canada | 60,000 | Unknown | Source |
| December 2025 | City of Milton | Government | Florida, United States | — | Unknown | Source |
| December 2025 | H&N Tax, Inc. d/b/a CSA Tax & Advisory | Finance | Massachusetts, United States | 2,930 | Unknown | Source |
| December 2025 | Omnibus Japan Co., Ltd. | Service | Tokyo, Japan | — | Unknown | Source |
| December 2025 | TOC Building | Other | Tokyo, Japan | — | Unknown | Source |
| November 2025 | Regis Resources Ltd | Other | Subiaco, Australia | — | No | Source |
| October 2025 | MONDI Resort Grundlsee | Other | Grundlsee, Austria | — | Unknown | Source |
| October 2025 | Community Based Support (CBS) Ltd. | Healthcare | Moonah, Australia | — | Unknown | Source |
| September 2025 | TriMed Inc. | Healthcare | California, United States | 81,203 | Unknown | Source |
| September 2025 | Chester County Library System | Government | Pennsylvania, United States | 1,281 | Unknown | Source |
| September 2025 | Dodd Group Limited | Service | Telford, United Kingdom | — | Unknown | Source |
| September 2025 | SAACKE GmbH | Manufacturing | Bremen, Germany | — | Unknown | Source |
| September 2025 | Aceros Inoxidables Olarra S.A. | Manufacturing | Loiu, Spain | — | Unknown | Source |
| August 2025 | True World Group (True World Foods) | Food and Beverage | New Jersey, United States | — | Unknown | Source |
| August 2025 | BüchnerBarella Unternehmensgruppe | Finance | Giessen, Germany | — | Unknown | Source |
| July 2025 | Oakland Museum of California (OMCA) | Other | California, United States | — | Unknown | Source |
| June 2025 | Inflite Engineering Services Limited | Manufacturing | Stansted, United Kingdom | 3,700 | Unknown | Source |
| June 2025 | Morrow Equipment Company | Retail | Oregon, United States | 1,660 | Unknown | Source |
| June 2025 | iBUYPOWER | Technology | California, United States | — | Unknown | Source |
| June 2025 | Greater Providence-Warwick Convention & Visitors Bureau (PWCVB) | Other | Rhode Island, United States | — | Unknown | Source |
| May 2025 | Davies, McFarland & Carroll, LLC | Legal | Pennsylvania, United States | 54,712 | Unknown | Source |
| May 2025 | Telcom Insurance Group | Finance | Kansas, United States | 4,653 | Unknown | Source |
| May 2025 | Kosmas | Retail | Prague, Czechia | — | No | Source |
| April 2025 | Chemical Services Group, Inc., d/b/a Royal Chemical Company | Manufacturing | Ohio, United States | 4,520 | Unknown | Source |
| April 2025 | Gearhiser, Peters, Elliott & Cannon, PLLC | Legal | Tennessee, United States | 26,951 | Unknown | Source |
| April 2025 | Sheheen, Hancock & Godwin, LLP | Finance | South Carolina, United States | 42,077 | Unknown | Source |
| April 2025 | Runtec Co., Ltd. | Transportation | Fukuoka, Japan | — | Unknown | Source |
| March 2025 | Adval Tech Holding AG | Manufacturing | Niederwangen, Switzerland | — | Unknown | Source |
| February 2025 | Pacific Residential Mortgage, LLC (PacRes Mortgage) | Finance | Oregon, United States | 35,525 | Unknown | Source |
| February 2025 | Geokon, Inc. | Manufacturing | New Hampshire, United States | 198 | Unknown | Source |
| February 2025 | Stürmer Maschinen | Retail | Hallstadt, Germany | — | Unknown | Source |
| January 2025 | TechNH, Inc. | Manufacturing | New Hampshire, United States | — | Unknown | Source |
| January 2025 | Nash Brothers Construction Co, Inc. | Construction | Illinois, United States | 631 | Unknown | Source |
| January 2025 | Empire Group of Reading PA Inc. | Construction | Pennsylvania, United States | — | Unknown | Source |
| January 2025 | Engine Power Source, Inc. | Manufacturing | South Carolina, United States | — | Unknown | Source |
| January 2025 | Clutch Industries Pty Ltd | Manufacturing | Coburg North, Australia | — | Unknown | Source |
| December 2024 | Silverado Contractors, Inc. | Construction | California, United States | — | Unknown | Source |
| December 2024 | Lowe Engineers, LLC | Service | Georgia, United States | — | Unknown | Source |
| December 2024 | Gossett Motor Cars, Inc. | Retail | Tennessee, United States | 3,527 | Unknown | Source |
| December 2024 | Grupul Electrica (Societatea Energetica Electrica S.A) | Utilities | Bucharest, Romania | — | No | Source |
| November 2024 | QualiTech, LLC | Food and Beverage | Minnesota, United States | 913 | Unknown | Source |
| November 2024 | Textiles Coated, Inc. | Manufacturing | New Hampshire, United States | 741 | Unknown | Source |
| November 2024 | Douglasville-Douglas County Water and Sewer Authority (DDCWSA) | Government | Georgia, United States | — | Unknown | Source |
| November 2024 | Conad Società Cooperativa | Food and Beverage | Bologna, Italy | — | Unknown | Source |
| November 2024 | South African Bureau of Standards (SABS) | Government | Pretoria, South Africa | — | No | Source |
| November 2024 | INPS Servizi SpA | Service | Rome, Italy | — | Unknown | Source |
| October 2024 | Mark Thomas | Service | California, United States | 1,357 | Unknown | Source |
| October 2024 | Tiger Aesthetics Medical, LLC | Healthcare | California, United States | 368 | Unknown | Source |
| October 2024 | ValueMax Group | Finance | Singapore, Singapore | — | Unknown | Source |
| September 2024 | Tricon Energy Inc. | Retail | Texas, United States | 265 | Unknown | Source |
| September 2024 | English Construction Company | Construction | Virginia, United States | 6,704 | Unknown | Source |
| September 2024 | Funlab Pty Ltd | Other | Abbotsford, Australia | — | Unknown | Source |
| August 2024 | Tranter | Manufacturing | Texas, United States | — | Unknown | Source |
| July 2024 | Riverside Resort Hotel and Casino | Other | Nevada, United States | 55,155 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Lynx's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.