Lynx ransomware group lists www.eliteflower.com on its leak site

• Ransomware group: Lynx
• Country: United States
• Sector: Agriculture and Food Production
• Announcement date: December 8, 2025

The Lynx ransomware group has announced the listing of www.eliteflower.com on their dedicated leak site. This announcement marks a potential cyberattack against the organization, as the threat actor has claimed a data breach involving the company.

The claimed attack event

According to the announcement made on December 8, 2025, the threat actor known as Lynx claimed a data breach involving www.eliteflower.com. The group officially listed the organization on their leak platform on the same date the attack was claimed.

While the group has made this claim public, technical observations indicate that the relevant page on the leak site is currently inaccessible. This lack of immediate visibility on the platform complicates the ability to verify the current status of the listing or the specific details provided by the attackers.

Ransomware leak sites are platforms used by cybercriminal groups to pressure victims into paying ransoms. These sites typically host lists of compromised organizations and, in some cases, samples of stolen data. The presence of a company on such a site is a significant indicator of a potential security incident that could impact the victim's operations.

Details regarding the alleged data breach

At this stage, there is no information available regarding the nature of the data allegedly leaked. The specific types of files, the volume of information, or the specific databases targeted remain unknown. The listing names no specific data types at this time.

In many ransomware scenarios, attackers utilize a tactic known as double extortion. In this method, the threat actor not only encrypts the victim's data to disrupt operations but also steals sensitive information before the encryption occurs. The threat of leaking this stolen data on a public platform provides the attackers with additional leverage to demand payment, as the victim faces the risk of regulatory penalties and reputational damage if the data is released.

Organization profile

Elite Flower is an agricultural company that specializes in the production and supply of various flowers. Their product range includes roses, spray roses, alstroemerias, and gerberas. The company was founded in 1991 and is headquartered in Miami, Florida, within the United States.

Risk assessment and implications

This claim by the Lynx group may pose significant risks to the organization's operational continuity. Because the institution is based in the United States, any potential data breaches may be subject to state-level data protection laws and regulations, which often mandate specific notification requirements and compliance standards following a security incident.

Furthermore, the Lynx group has been identified as having code similarities with INC Ransom. Due to this connection, the possibility of double extortion tactics should not be overlooked. Such an approach can lead to secondary risks for the organization, including identity theft or targeted phishing attacks directed at the organization's employees and business partners.

For organizations operating in the agriculture and food production sector, maintaining robust cybersecurity posture is vital. Common defensive steps to mitigate these risks include implementing multi-factor authentication, maintaining offline backups, and conducting regular employee training to recognize phishing attempts. Additionally, monitoring for unauthorized access and ensuring compliance with regional data protection regulations can help manage the fallout of a potential breach.