Skip to content
ThreatCluster

Lynx Ransomware Breach Exposes Taxpayer Data

First seen 30 Dec 2025, 18:25 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

The Lynx gang, linked to Russia, has claimed responsibility for a ransomware attack on CSA Tax & Advisory, resulting in the exposure of sensitive taxpayer information, including Social Security Numbers (SSNs) and tax returns. This breach affects numerous clients as tax filing season approaches.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 203d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Lynx and CSA Tax & Advisory in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed