Ransomware Group: LYNX

VICTIM NAME: gouverneur[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the LYNX Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to Gouvernor Hotels, a public sector organization based in the United States. The attack was publicly disclosed on June 13, 2025, indicating a recent compromise. The hackers, associated with the “lynx” group, have made available a link to the leak claim on the dark web. The incident involves the potential exposure of data related to the organization, although specific details about the compromised information have not been publicly disclosed. An image screenshot of relevant data or internal details is available, which may include visual evidence of the leak or internal infrastructure. The situation suggests a serious security breach impacting the organization’s operations and data integrity.

The leak page does not specify the exact nature of the compromised data or whether sensitive information such as personal or operational details was exposed. It appears to involve data that could affect the organization’s internal processes or public-facing services. No evidence suggests the involvement of third-party entities or employee data, as indicated by the available infostealer statistics. The organization’s website, gouverneur.com, remains operational, but the breach could impact stakeholder trust or operational continuity. The leak is part of a wider pattern of ransomware attacks targeting public sector entities, emphasizing the ongoing cybersecurity risks faced by government-related organizations.