lynx
First seen July 29, 2024Active417 claimed victims
The claims below are reproduced as posted by lynx on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Lynx is a ransomware-as-a-service operation that emerged in mid-2024 as a rebrand of INC Ransomware (whose source code was sold for $300,000 on the RAMP forum), claiming ~300 victims across manufacturing, business services, technology, and transportation with an 80/20 profit split for affiliates.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Ascend Analytics (ascendanalytics.com) | August 6, 2024 | ransomware_live | — |
| Warwick Hotels and Resorts | August 1, 2024 | ransomware_live | — |
| PBS group | July 27, 2024 | ransomware_live | — |
| Pyle Group | July 24, 2024 | ransomware_live | — |
| Cambria Automobiles (summitgroup.local) | July 24, 2024 | ransomware_live | — |
| Johnson Laschober & Associates | July 23, 2024 | ransomware_live | — |
| Riverside Resort Hotel and Casino | July 23, 2024 | ransomware_live | — |
| Miller Boskus Lack Architects (ad.mbl-arch.com) | July 18, 2024 | ransomware_live | — |
| Concut (ddm.local) | July 18, 2024 | ransomware_live | — |
| True Blue Environmental | July 16, 2024 | ransomware_live | — |
| The Greenhouse People | July 16, 2024 | ransomware_live | — |
| Alvan Blanch Development | July 15, 2024 | ransomware_live | — |
| Innoquest | July 15, 2024 | ransomware_live | — |
| Reef-PCG (pcg.local) | June 1, 2024 | ransomware_live | — |
| Excel Security | May 30, 2024 | ransomware_live | — |
| pactchangeslives.com | January 11, 2024 | ransomware_live | — |
| Atlas Commodities | May 22, 2023 | ransomware_live | — |
← NewerPage 5 of 5
Claim data from ransomware.live and RansomLook (CC BY 4.0).