Lynx ransomware group lists hubermanlaw.co.il on its leak site

• Ransomware group: Lynx
• Country: Israel
• Sector: Professional Services
• Announcement date: June 26, 2025

Lynx claims a data breach against Huberman Law

The threat group known as Lynx has listed hubermanlaw.co.il on its leak site, alleging a data breach. This announcement, made on June 26, 2025, suggests that the organization has been targeted by the group. According to the claim, the threat actor gained access to the systems of the organization around June 17, 2025.

Ransomware leak sites serve as platforms where cybercriminals host information stolen during a breach to pressure victims into paying ransoms. These sites often feature a countdown timer or a list of victims to increase the psychological pressure on the targeted organization. When a group lists a victim, it is often a precursor to a public disclosure of sensitive information if the ransom demands are not met.

Details of the alleged incident

The Lynx group listed hubermanlaw.co.il on its leak platform on June 26, 2025. The threat actor claims to have gained access to the organization's systems. However, technical observations regarding the announcement indicate that the specific page on the leak site is currently unreachable. A screenshot provided in connection with the claim shows that the relevant page on the leak site is not found, making it difficult to verify the current status of the listing.

Regarding the specific contents of the alleged breach, there is no information available regarding the nature of the alleged leaked data. The listing currently names no specific data types.

About Huberman Law

Huberman Law is an Israel-based law firm specializing in commercial law and technology innovation. The firm provides legal services and technological solutions designed to deliver commercial advantages to its clients.

Analysis and implications for the legal sector

The Lynx group is known as a RaaS (Ransomware-as-a-Service) entity that emerged in 2024 and shares code similarities with INC Ransom. As a RaaS operation, the group operates by providing ransomware tools to affiliates, who then carry out the attacks. This model allows for specialized development and execution of cyberattacks.

Given the organization's operation in the professional legal services sector, any potential data breach may pose risks to client confidentiality and trade secrets. Because the firm specializes in commercial law and technology innovation, the sensitive nature of its work makes it a high-value target for threat actors seeking proprietary information. As an Israel-based entity, a potential breach could involve violations of local data protection regulations as well as international privacy standards.

The organization and its clients may be at risk of identity theft or targeted phishing attacks resulting from a breach. Considering the group's past methods, secondary extortion tactics, such as publishing data or exerting pressure through ransom demands, may be attempted. In such scenarios, attackers often use a method known as double extortion, where they not only encrypt the victim's data but also threaten to leak it publicly to maximize leverage.

Organizations in the professional services sector can take several defensive steps to mitigate these risks. Implementing robust multi-factor authentication (MFA) across all remote access points is a critical baseline. Regular, offline backups of critical data can help ensure business continuity in the event of encryption. Furthermore, continuous monitoring of network traffic can help detect unauthorized access early in the attack lifecycle. Given the potential for secondary extortion, maintaining a comprehensive incident response plan that includes legal and regulatory communication strategies is essential for managing the fallout of a potential data exposure.