Lynx ransomware group claims data breach against PBS group

• Ransomware group: Lynx
• Country: United Kingdom
• Sector: Professional Services
• Announcement date: August 24, 2024

Lynx ransomware group claims data breach against PBS group

The Lynx ransomware group has listed the United Kingdom-based organization PBS group on its dedicated leak site. In an announcement made on August 24, 2024, the threat actor group claimed to have successfully breached the organization, alleging that they have gained access to sensitive information. This development follows a claimed attack date of July 27, 2024.

Details of the claimed attack

According to the announcement posted on the group's leak platform, the Lynx group is claiming a data breach against PBS group. To support their claim, the group has published sample documents that are alleged to be related to the company's internal business operations. The presence of these samples is a common tactic used by ransomware groups to demonstrate the validity of their breach and to pressure the victim into meeting their demands.

The Lynx group is a relatively new entity in the cyber threat landscape, having emerged in 2024. The group operates as a Ransomware-as-a-Service (RaaS) entity. Security researchers have noted that the group's code exhibits similarities to the INC Ransom group. By utilizing a RaaS model, the group allows affiliates to carry out attacks using their infrastructure, which can lead to a higher frequency of incidents across various sectors.

Data types involved in the leak

The leaked sample documents provided by the group in screenshots suggest that the breach may involve a variety of sensitive information. The files shown in these samples appear to include documents that are critical to both business operations and individual privacy. The specific types of data identified in the leaked samples include:

• Non-disclosure agreements
• Medical test results
• Corporate proposal files

No specific information was provided regarding the total size of the data stolen or the total number of files compromised. Furthermore, there was no mention of a specific ransom demand in the announcement.

About PBS group

PBS group is a technology and professional services company. The organization specializes in the design, implementation, and maintenance of systems that enable their customers to optimize their business processes. Based in the United Kingdom, the company provides technical expertise to help clients streamline their operational workflows through specialized system management.

Risk assessment and implications

This leak claim may pose a significant risk of exposure for the personal data of PBS group employees or clients. Because the organization is based in the United Kingdom, a potential data breach of this nature could lead to legal sanctions and mandatory notification obligations under the UK GDPR framework. The nature of the shared sample documents suggests that the organization's trade secrets and sensitive health data may be at risk.

The publication of such sensitive information can lead to severe reputational damage and may facilitate targeted phishing attacks against the organization's third parties. Given the tactics typically employed by the Lynx group, it is possible that they are attempting to increase pressure on the organization through a double-extortion strategy. In a double-extortion scenario, attackers not only encrypt the victim's data but also threaten to leak sensitive information on public forums to compel payment.

For organizations operating in the professional services sector, maintaining robust data protection measures is critical. General defensive steps for organizations facing such threats include implementing strict access controls, maintaining offline backups, and ensuring comprehensive employee training to recognize phishing attempts. Furthermore, organizations must be prepared to follow regulatory guidelines regarding data breach notifications to mitigate legal and reputational consequences.