iBUYPOWER listed on Lynx ransomware leak site
The Lynx ransomware group has announced the listing of the technology company iBUYPOWER on its leak site.
- Published
- 2 min read
- 2 min read
- Ransomware group: Lynx
- Country: United States
- Sector: Technology
- Announcement date: July 22, 2025
The Lynx ransomware group has announced the listing of the technology company iBUYPOWER on its leak site. This announcement, made on July 22, 2025, indicates that the threat actor claims to have targeted the institution, potentially exposing sensitive information through a data breach.
The claims made by Lynx
The threat actor known as Lynx claims to have targeted the institution iBUYPOWER via a post on its leak site. According to the announcement, the group alleges that it obtained access to the institution's network on June 20, 2025. This unauthorized access is the basis for the group's subsequent claims regarding a data breach.
Lynx is identified as a Ransomware-as-a-Service (RaaS) entity. This type of cybercriminal model involves developers creating ransomware and leasing it to affiliates who carry out the actual attacks. This group emerged in 2024 and has been noted by researchers for sharing code similarities with the INC Ransom group. Such technical overlaps often suggest a level of sophistication and shared resources within the cybercriminal ecosystem.
Details regarding the alleged data breach
At this stage, no details regarding the nature of the allegedly leaked data have been provided. The group has not specified the types of files or the volume of information that may have been compromised during the incident. Furthermore, the attached screenshot provided by the group displays a 404 error page, providing no visual confirmation of the stolen content.
- No specific data types were named in the listing.
About iBUYPOWER
iBUYPOWER is a technology company that has been designing and manufacturing high-performance custom gaming computers and systems since 1999. The organization provides customized hardware solutions specifically tailored for professional gamers, game developers, and esports tournaments.
Risk assessment and implications
This incident may pose a potential data privacy risk for iBUYPOWER customers and employees. Because the institution is based in the United States, any potential data breach may be subject to state-level data protection laws and regulations. The legal implications for the company will depend heavily on the specific nature of the data involved and the jurisdiction of the affected individuals.
Given the past methods of the Lynx group, disruptions in the institution's operational processes may occur. Additionally, secondary risks such as identity theft or targeted phishing attacks could emerge if personal information is indeed compromised. The technical similarities between Lynx and INC Ransom may serve as an indicator of the complexity and severity of the attacks, though the actual risk level remains uncertain until the scope of the leaked data is clarified.
In general, ransomware attacks often utilize double extortion tactics, where attackers not only encrypt an organization's data to disrupt operations but also threaten to leak sensitive information to pressure the victim into paying a ransom. To defend against such threats, organizations in the technology and hardware sectors typically focus on robust network segmentation, regular offline backups, and rigorous patch management to close vulnerabilities that attackers exploit to gain initial access.