Gills Onions listed on lynx ransomware leak site

• Ransomware group: lynx
• Country: United States
• Sector: Agriculture and Food Production
• Announcement date: December 12, 2024

The ransomware group known as lynx has listed the United States-based organization Gills Onions on its dedicated leak site. According to the announcement made by the threat actors, the company has been targeted in a cyberattack resulting in a data breach. The group has published information regarding the incident, claiming that they have successfully accessed the company's internal systems.

Details of the claimed attack

The lynx group has announced that it has leaked data belonging to Gills Onions on its leak site. This announcement includes general information regarding the company's operations and claims that the incident took place on December 5, 2024. The group has presented specific data as proof of their intrusion, suggesting that they have gained access to the company's systems.

In ransomware attacks of this nature, threat actors often utilize leak sites to pressure victims into paying ransoms. These sites serve as a public gallery where stolen information is displayed to increase visibility and reputational damage. While the group claims to have breached the network, the specific details of the intrusion method remain undisclosed in the public announcement.

Data involved in the breach

Based on the information provided by the attackers, the leaked data appears to consist of various internal files. Visual evidence provided by the group, including screenshots, displays files that resemble spreadsheets. These files appear to contain sensitive information related to the company's internal functions.

Affected data types

• Production data
• Operational records

The presence of such files suggests that the attackers have targeted documentation that reflects the core activities of the organization. No information was given regarding the total size of the data or the specific file count involved in this incident.

About Gills Onions

Gills Onions is a US-based large-scale agricultural and food processing company specializing in fresh-cut onion products. It is known for its sustainable production methods and industrial-scale onion processing operations.

Impact and potential risks

This leak may lead to the exposure of the company's trade secrets and operational processes. The publication of this data could result in a loss of trust among the company's supply chain partners and may weaken its competitive advantage. As a US-based entity, the company may face state-level data protection regulations and potential legal obligations.

Furthermore, the code similarity between the lynx group and INC Ransom suggests that the group may have adopted double-extortion tactics. Double extortion is a common ransomware strategy where attackers not only encrypt a victim's data but also steal it, threatening to release it publicly if the ransom is not paid. This indicates that secondary risks could be high. If personal data belonging to employees or customers is included, identity theft and targeted phishing attacks may be observed.

In the agriculture and food production sector, such breaches can have significant downstream effects. Organizations in this sector often rely on complex supply chains and highly specific operational data to maintain efficiency and sustainability. When operational records are compromised, it can disrupt the trust required between producers and distributors. To mitigate such risks, organizations typically focus on strengthening network segmentation, implementing robust access controls, and maintaining comprehensive monitoring of their digital environments to detect unauthorized access before data exfiltration occurs.