Babuk2 ransomware group lists lexmark.com Company on its leak site

• Ransomware group: Babuk2
• Country: United States
• Sector: Technology
• Announcement date: March 11, 2025

The Babuk2 ransomware group has claimed responsibility for a significant data breach involving Lexmark, a multinational technology company. According to an announcement made on the group's leak site, the threat actors have published approximately 77GB of data that they claim belongs to the organization. This development follows a pattern often seen in modern cyberattacks, where groups utilize dedicated leak sites to pressure victims by threatening to release sensitive information if ransom demands are not met.

The alleged data breach event

On March 11, 2025, the Babuk2 threat actor listed data it claims belongs to Lexmark on its leak platform. The announcement was made on the same day the group claimed the attack occurred. The group has provided download links and asserts that the stolen data is accessible to the public. To demonstrate the validity of their claims, the group provided samples of various documents, which include technical records and service forms related to the company's operations.

The announcement included a screenshot intended to verify the contents of the breach. This screenshot displays a service protocol and a technical form belonging to WASKO S.A. While the total size of the allegedly leaked data is stated to be 77GB, the group has not provided a specific file count or a ransom demand in the public announcement.

Data types and content involved

The leaked information, as claimed by the Babuk2 group, appears to consist of various operational and technical documents. Based on the details provided in the leak site announcement, the following types of data are allegedly included in the breach:

• Service protocols
• Technical forms
• Business process documents

The presence of these documents suggests that the breach may involve internal operational workflows and technical documentation used by the company to manage its services and business processes.

About Lexmark

Lexmark is a multinational technology company specializing in printing and imaging solutions, software, and services. The organization provides laser printers and managed print services to a wide range of enterprise customers globally.

Risk assessment and industry implications

This leak may pose significant risks to the organization's trade secrets and operational data. The shared sample documents could contain sensitive information regarding the company's relationships with third-party partners. Because Lexmark is a US-based entity, a potential data breach could trigger notification obligations under relevant state laws and federal regulations.

Furthermore, such leaks may compromise the organization's supply chain security and create opportunities for targeted phishing attacks. In the technology and imaging sector, maintaining the integrity of technical forms and service protocols is vital for operational security. When technical documentation is exposed, it can provide attackers with insights into the company's service delivery models and technical infrastructure.

In general, ransomware groups often employ a