Ransom! Stonehenge (APR-2026)

The ransomware claim alleges that the Lynx threat actor targeted Stonehenge Co Ltd, a commercial and residential construction company based in Phra Nakhon Si Ayutthaya, Thailand, with 250–499 employees and 10–25 million in revenue. The claim provides few details on the exact impact or ransom demand. #Thailand

Incident Details

  • Victim: Stonehenge
  • Sector: Not Found
  • Country:
  • Actor: lynx
  • Source: http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad.onion/leaks/69d442099c439c5f45f25fd7
  • Discovered: 2026-04-14 19:07:29.994665
  • Published: 2026-04-06 23:30:17.529000

Information

  • Ransomware incident attributed to actor Lynx affecting Stonehenge
  • Stonehenge Co Ltd operates in the Commercial & Residential Construction industry
  • Employees: 250–499
  • Revenue: $10M–$25M
  • Headquarters: Phra Nakhon Si Ayutthaya, Phra Nakhon Si Ayutthaya, Thailand

Disclaimer: This post is based on public claims made by the ransomware group "lynx". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live