RUSSIAN LYNK GROUP LEAKS SENSITIVE UK MOD FILES, INCLUDING INFO ON EIGHT MILITARY BASES

Summary from the TLDR InfoSec newsletter

Russian cybercrime group Lynx breached Dodd Group, a UK Ministry of Defence contractor, on September 23, stealing approximately 4TB of data, including sensitive files on eight RAF and Royal Navy bases such as RAF Lakenheath (hosting US F-35 jets and believed nuclear weapons storage), RAF Portreath (NATO radar site), and RAF Predannack (UK Drone Hub). The leaked data includes roughly 1,000 documents containing staff names, emails, phone numbers, vehicle details, visitor logs, security guidance, and construction records marked as “Controlled” or “Official Sensitive,” with the gang publishing data after failed ransom negotiations. Security professionals should prioritize third-party risk management and contractor security assessments, as supply chain compromises continue to expose critical defense infrastructure and personnel data that nation-state actors can leverage for intelligence gathering or future attacks.