Ransomware Group: LYNX

VICTIM NAME: McElwee Firm

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the LYNX Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The leak page pertains to McElwee Firm PLLC, a legal services organization based in North Wilkesboro, North Carolina. The victim is identified as a small to medium-sized law firm with between five and nine employees, and annual revenues ranging from one to five million dollars. The incident was publicly disclosed on April 16, 2025, with the compromise date recorded as April 15, 2025. The page features a screenshot showcasing possibly internal documents or data, which indicates that sensitive information may have been accessed or compromised during the attack.

The attackers have provided a link to the leak site, suggesting that a data breach occurred on the victim’s systems. Although specific details about the leaked data are not included here, the presence of a leak implies that confidential information, possibly related to client or firm records, could have been exposed. The attack group’s affiliation with the ‘lynx’ group has been noted. No direct evidence of data exfiltration methods such as malicious infostealers is indicated in this report. The incident highlights the ongoing threat posed to small legal practices and the importance of cybersecurity defenses.