Ransomware Group: LYNX

VICTIM NAME: Nactarome

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the LYNX Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The recent ransomware leak involves Nactarome, a company specializing in the development and manufacture of natural flavors, colors, and functional ingredients primarily for the Food & Beverage industry. The attack was publicly disclosed on July 10, 2025, with the attack date recorded as July 9, 2025. The attack occurred in Italy, with the victim company headquartered in Bresso. The leak publication indicates that sensitive information related to the company’s operations has potentially been compromised. The page includes a screenshot depicting internal documents or data, suggesting the attackers have accessed confidential company information.

Although specific details about the data leaked are not provided, the leak page notes the presence of downloadable data or files. The attackers, identified as part of the “lynx” group, may have exfiltrated business-critical information. No personal or PII data appears to be explicitly exposed in the available information. The company’s overall activity and industrial focus are maintained, with no indication of additional malicious activity beyond the data leak. The leak’s publication aims to inform about the breach’s scope and the potential access to sensitive corporate data.