Admiral Gaming Network targeted by Lynx ransomware group

• Ransomware group: Lynx
• Country: Italy
• Sector: Retail & E-Commerce
• Announcement date: August 8, 2025

Lynx group claims massive data breach at Admiral Gaming Network

The Lynx ransomware group has announced a significant data breach involving Admiral Gaming Network, an Italian organization. According to a post on a leak site announced on August 8, 2025, the threat actors claim to have compromised over 600 GB of sensitive information. The announcement suggests that the incident itself may have occurred as early as July 21, 2025.

This type of incident is characteristic of modern ransomware tactics, specifically double extortion. In such scenarios, attackers do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive data. The goal is to use the threat of leaking this information publicly as leverage to pressure the organization into paying a ransom. While the specific ransom demand for this incident has not been disclosed, the group has explicitly stated that failure to comply will result in the public release of all affected data.

Scope of the alleged data theft

The claims made by the Lynx group indicate a broad scope of compromise. The threat actors assert that the stolen data belongs not only to Admiral Gaming Network but also to various affiliates of the Novomatic AG Group. The volume of data reported—600 GB—suggests a widespread compromise within the targeted infrastructure.

According to the screenshots and text provided by the attackers, the compromised information is highly sensitive and includes various types of documentation. The specific categories of data claimed to be stolen include:

• Financial records
• Fiscal documents
• Tax details
• Employee personal data
• Customer personal data

The presence of such diverse data types, ranging from corporate financial records to individual personal information, increases the potential impact of the breach on both the company and the individuals whose data was taken.

About Admiral Gaming Network

Admiral Gaming Network is an Italy-based retailer specializing in gaming and entertainment equipment. The company's business model focuses on the sale of various gaming hardware and accessories, serving the needs of the gaming and entertainment sector.

Potential impacts and security implications

The alleged breach carries significant implications for Admiral Gaming Network. From an operational standpoint, the theft of fiscal and financial documents can disrupt core business processes. Furthermore, the exposure of personal data belonging to both employees and customers poses a direct threat to individual privacy and can lead to a loss of consumer trust in the brand.

Beyond immediate operational concerns, the nature of the stolen data introduces secondary risks. When personal and tax details are leaked, individuals become more vulnerable to targeted phishing attacks and identity theft. For an organization based in Italy, such a breach also brings regulatory scrutiny, as the company must navigate compliance with GDPR regulations, which may result in administrative fines.

Technical analysis of the threat actor's methods suggests that the Lynx group may have code similarities with the INC Ransom group, which may indicate the complexity of the attack. This complexity often requires organizations to employ robust defensive strategies. In the retail and e-commerce sectors, maintaining rigorous security protocols is essential to protect against such sophisticated threats. Common defensive measures include implementing multi-factor authentication, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized data exfiltration before it reaches a massive scale.