Lynx ransomware attacks in India

Lynx has posted 5 Indian organisations on its leak site since Oct 2024, 2 of them in the past 12 months. The sector it hits most often in India is manufacturing.

5Indian victims posted, all time
2in the past 12 months
Oct 2024first Indian post
Apr 2026latest Indian post

Indian victims by month

1111Nov 2024Nov 2025Oct 2026

Red bars are the past 12 months.

Sectors hit in India, all time

Indian victims by year

  • 20262
  • 20251
  • 20242

Other gangs active in India

Leak-site counts from ransomware.live’s public data for victims with country India, as of 16 Oct 2026. A post is a claim made by a criminal group, not a confirmed breach, and the real number of attacks is higher. Victims are never named on this site. See the method.